in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10 and OpenSolaris before snv_103 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the \number of offers \ aka Bug ID 6713805.