CVE-2020-26133

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Dual DHCP DNS Server 7.40. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the DualServer.exe binary.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26133.md
https://github.com/an0ry/advisoriesThird Party Advisory
https://sourceforge.net/projects/dhcp-dns-server/Product
https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26133.md
https://github.com/an0ry/advisoriesThird Party Advisory
https://sourceforge.net/projects/dhcp-dns-server/Product

Timeline

Published: Oct 28, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-261346.1Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.CVE-2020-261356.1Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.CVE-2020-261366.5In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authentication.CVE-2020-261376.5urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control CVE-2020-261385.3In SilverStripe through 4.6.0-rc1, a FormField with square brackets in the field name skips validation.CVE-2020-261395.3An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has CVE-2020-26146.0Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: APM Mesh). Supported versions CVE-2020-261406.5An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintex CVE-2020-261416.5An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integri CVE-2020-261425.3An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. A CVE-2020-261436.5An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragme CVE-2020-261446.5An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frame