In addition, if a rogue DHCP is set to provide as default gateway an IP address of a machine controlled by a misbehaving user, it can sniff all the traffic sent by the clients to other networks, violating network security policies as well as user privacy (see man in the middle).
Additionally, if a malicious DHCP assigns the default gateway with an IP address of a machine controlled by a misbehaving user, it can intercept traffic from clients to other networks, undermining both network security policies and user privacy (refer to man in the middle).