Is CVE-2004-1006 actively exploited?

CVE-2004-1006 has no public evidence of in-the-wild exploitation as of 2026-04-16.

What is the CVSS score for CVE-2004-1006?

CVE-2004-1006 has a CVSS score of 10 (UNKNOWN severity). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

How do I patch CVE-2004-1006?

Patch guidance is available from isc security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2004-1006.

CVE-2004-1006 - remediation guidance & executive summary

Q: Which products are affected by CVE-2004-1006?

22 products: isc dhcpd, isc dhcpd, isc dhcpd, isc dhcpd, isc dhcpd, and 17 more.

Description

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.

CVSS Metrics

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Access Vector: network
Access Cmplx: low
Auth: none
Confidentiality: complete
Integrity: complete
Availability: complete
Weaknesses: NVD-CWE-Other

Metadata

Primary Vendor: ISC
Published: 3/1/2005
Last Modified: 4/16/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

isc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpdisc : dhcpd

Remediation Guidance

Executive Summary

View on NIST NVD