BootP 2.4.3 daemon was found to be vulnerable to a race condition.
14 Nov. 1998
Summary
BootpD, a daemon whose purpose is to implement the Bootstrap Protocol (BootP) which makes it possible for hosts/server to dynamically get/assign IP address, was found to have a race condition making it possible for a malicious user to cause damage to the system, by overwriting whichever file he wants.
BootpD dumps, if not specified otherwise, to a file called '/tmp/bootpd.dump', if a malicious user would symbolically link this file to an existing file (for example '/etc/passwd'), the linked file would be overwritten causing a severe data loose.
