CVE-2003-0145

2004-09-0104:00:00

mitre

web.nvd.nist.gov

tcpdump

vulnerability

denial of service

remote attackers

radius attributes

infinite loop

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.02

Percentile

88.9%

JSON

Unknown vulnerability in tcpdump before 3.7.2 related to an inability to “Handle unknown RADIUS attributes properly,” allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093.

Affected configurations

Nvd

Node

lbltcpdumpMatch3.5.2

lbltcpdumpMatch3.6.2

lbltcpdumpMatch3.7

lbltcpdumpMatch3.7.1

VendorProductVersionCPE
lbltcpdump3.5.2cpe:2.3:a:lbl:tcpdump:3.5.2:*:*:*:*:*:*:*
lbltcpdump3.6.2cpe:2.3:a:lbl:tcpdump:3.6.2:*:*:*:*:*:*:*
lbltcpdump3.7cpe:2.3:a:lbl:tcpdump:3.7:*:*:*:*:*:*:*
lbltcpdump3.7.1cpe:2.3:a:lbl:tcpdump:3.7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lbl	tcpdump	3.5.2	cpe:2.3:a:lbl:tcpdump:3.5.2:::::::*
lbl	tcpdump	3.6.2	cpe:2.3:a:lbl:tcpdump:3.6.2:::::::*
lbl	tcpdump	3.7	cpe:2.3:a:lbl:tcpdump:3.7:::::::*
lbl	tcpdump	3.7.1	cpe:2.3:a:lbl:tcpdump:3.7.1:::::::*