Lucene search

K
osvGoogleOSV:DSA-1353-1
HistoryAug 11, 2007 - 12:00 a.m.

tcpdump - integer overflow

2007-08-1100:00:00
Google
osv.dev
8

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

It was discovered that an integer overflow in the BGP dissector of tcpdump,
a powerful tool for network monitoring and data acquisition, may lead to
the execution of arbitrary code.

For the oldstable distribution (sarge) this problem has been fixed in
version 3.8.3-5sarge3.

For the stable distribution (etch) this problem has been fixed in
version 3.9.5-2etch1.

For the unstable distribution (sid) this problem has been fixed in
version 3.9.5-3.

We recommend that you upgrade your tcpdump package.

CPENameOperatorVersion
tcpdumpeq3.9.5-2

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P