Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Port 68 (tcp/udp) Attack Activity Port 68 (tcp/udp) Attack Activity

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
[get complete service list]
Port Information
Protocol Service Name
tcp bootpc Bootstrap Protocol Client
udp bootpc Bootstrap Protocol Client
Top IPs Scanning
TodayYesterday (7027) (96) (7009) (40) (265) (38) (50) (37) (13) (36) (13) (34) (13) (34) (12) (31) (12) (30) (12) (27)
User Comments
Submitted By Date
Add a comment
CVE Links
CVE # Description
CVE-2014-7169 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.