Lucene search

K
freebsdFreeBSDF8551668-DE09-4D7B-9720-F1360929DF07
HistoryMar 12, 2004 - 12:00 a.m.

tcpdump ISAKMP payload handling remote denial-of-service

2004-03-1200:00:00
vuxml.freebsd.org
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.684 Medium

EPSS

Percentile

97.9%

Chad Loder has discovered vulnerabilities in tcpdump’s
ISAKMP protocol handler. During an audit to repair these
issues, Bill Fenner discovered some related problems.
These vulnerabilities may be used by an attacker to crash a
running tcpdump' process. They can only be triggered if the -v’ command line option is being used.
NOTE: the racoon ISAKMP/IKE daemon incorporates the ISAKMP
protocol handler from tcpdump, and so is also affected by
this issue.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchtcpdump< 3.8.3UNKNOWN
FreeBSDanynoarchracoon< 20040408aUNKNOWN
FreeBSDanynoarchfreebsd< 5.2.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.684 Medium

EPSS

Percentile

97.9%