Security vulnerabilities in the DHCP (in.dhcpd(1M)) server handling of DHCP requests may allow a remote unprivileged user to kill the DHCP server daemon (Denial of Service) or to execute arbitrary code as the root user.

One of the issues described here is also referenced in the following document:

CVE-2007-5365 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5365