CVE-2005-1464

CVE-2005-1464 is listed among multiple vulnerabilities in Ethereal up to version 0.10.11 that allow a remote attacker to cause a denial of service (infinite loop). The connected advisories confirm Ethereal upgrades to version 0.10.11 as a remediation. The exact root cause per-CVE isn’t detailed i...

l2tpd: Buffer overflow

Background l2tpd is a GPL implentation of the Layer 2 Tunneling Protocol. Description Thomas Walpuski discovered a buffer overflow that may be exploitable by sending a specially crafted packet. In order to exploit the vulnerable code, an attacker would need to fake the establishment of an L2TP...

FreeBSD : L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump (192)

The following package needs to be updated: tcpdump %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg96ba2dae4ab011d896f20020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

CVE-2003-1029

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...

CVE-2003-1029

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...

CVE-2003-1029

CVE-2003-1029 affects the tcpdump packet analyzer (versions 3.8.1 and earlier) with a vulnerable L2TP protocol parser. A packet with invalid data sent to UDP port 1701 can trigger an infinite loop and unbounded memory use in l2tp_avp_print, causing a denial of service. Connections in the related ...

CVE-2003-1029

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...

CVE-2003-1029

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service infinite loop and memory consumption via a packet with invalid data to UDP port 1701, which causes l2tpavpprint to use a bad length value when calling printoctets...

L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump

Jonathan Heusser discovered vulnerabilities in tcpdump's L2TP, ISAKMP, and RADIUS protocol handlers. These vulnerabilities may be used by an attacker to crash a running tcpdump' process...

tcpdump L2TP DoS

L2TP packet containing 0xff,0x02 bytes causes parser to enter an infinite loop...

Remote crash in tcpdump from OpenBSD

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------- Original Message -------- Subject: user/3610: repetable tcpdump remote crash Resent-Date: Sat, 20 Dec 2003 08:55:02 -0700 MST Resent-From: [email protected] GNATS Filer Resent-To: [email protected] Date: Sat, 20 Dec 2003 16:42:25 +01...

L2TP Network Server Detection

The report host understands the L2TP tunneling protocol and appears to be a VPN endpoint, or more specifically, an L2TP Network Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11387; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate",...