RHEL 2.1 : pxe (RHSA-2002:165)
Medium Nessus Plugin ID 12317
SynopsisThe remote Red Hat host is missing a security update.
DescriptionUpdated PXE packages are now available for Red Hat Linux Advanced Server which fix a vulnerability that can crash the PXE server using certain DHCP packets.
The PXE package contains the PXE (Preboot eXecution Environment) server and code needed for Linux to boot from a boot disk image on a Linux PXE server.
It was found that the PXE server could be crashed using DHCP packets from some Voice Over IP (VOIP) phones. This bug could be used to cause a denial of service (DoS) attack on remote systems by using malicious packets.
Users of PXE on Red Hat Linux Advanced Server are advised to upgrade to the new release which contains a version of PXE that is not vulnerable to this issue.
SolutionUpdate the affected pxe package.