Fedora 7 : tcpdump-3.9.7-1.fc7 (2007-1361)

New upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

openSUSE 10 Security Update : tcpdump (tcpdump-4036)

This update fixes a buffer overlow that could be triggered when displaying BGP packets CVE-2007-3798. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tcpdump-4036. The text description of this...

GLSA-200708-12 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-12 Wireshark: Multiple vulnerabilities Wireshark doesn't properly handle chunked encoding in HTTP responses CVE-2007-3389, iSeries capture files CVE-2007-3390, certain types of DCP ETSI packets CVE-2007-3391, and SSL or MMS...

SOL7827 - tcpdump 3.9.6 vulnerability CVE-2007-3798

For information about this advisory, refer to the Common Vulnerabilities and Exposures website at the following location:...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 9.0 / 9.1 : tcpdump (SSA:2007-230-01)

New tcpdump packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0 to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-230-01. The text...

[slackware-security] tcpdump

New tcpdump packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and 12.0 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-3798 Here are the details from the Slackware...

Wireshark: Multiple vulnerabilities

Background Wireshark is a network protocol analyzer with a graphical front-end. Description Wireshark doesn't properly handle chunked encoding in HTTP responses CVE-2007-3389, iSeries capture files CVE-2007-3390, certain types of DCP ETSI packets CVE-2007-3391, and SSL or MMS packets CVE-2007-339...

Debian DSA-1353-1 : tcpdump - integer overflow

It was discovered that an integer overflow in the BGP dissector of tcpdump, a powerful tool for network monitoring and data acquisition, may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1353-1] New tcpdump packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1353-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 11th, 2007 http://www.debian.org/security/faq -...

DSA-1353-1 tcpdump - integer overflow

Bulletin has no description...

Fedora Core 6 : tcpdump-3.9.4-11.fc6 (2007-654)

CVE-2007-3798 Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value. Note that Tenable Network Security has extracted the preceding description...

[SECURITY] Fedora Core 6 Update: tcpdump-3.9.4-11.fc6

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

FreeBSD : FreeBSD -- Buffer overflow in tcpdump(1) (2dc764fa-40c0-11dc-aeac-02e0185f8d72)

An un-checked return value in the BGP dissector code can result in an integer overflow. This value is used in subsequent buffer management operations, resulting in a stack based buffer overflow under certain circumstances. Impact : By crafting malicious BGP packets, an attacker could exploit this...

FreeBSD-SA-07:06.tcpdump

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:06.tcpdump Security Advisory The FreeBSD Project Topic: Buffer overflow in tcpdump1 Category: contrib Module: tcpdump Announced: 2007-08-01 Credits: "mu-b"...

FreeBSD -- Buffer overflow in tcpdump(1)

Problem Description: An un-checked return value in the BGP dissector code can result in an integer overflow. This value is used in subsequent buffer management operations, resulting in a stack based buffer overflow under certain circumstances. Impact: By crafting malicious BGP packets, an attacke...

[SECURITY] Fedora 7 Update: tcpdump-3.9.7-1.fc7

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

FreeBSD : tcpdump -- remote integer underflow vulnerability (983) (deprecated)

The remote host is missing an update to the system The following package is affected: tcpdump This plugin is deprecated by plugin ID 25833, freebsdpkgff284bf03f3211dca79a0016179b2dd5.nasl %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the VuXML entry has been superseded by...

GLSA-200707-14 : tcpdump: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200707-14 tcpdump: Integer overflow mu-b from Digital Labs discovered that the return value of a snprintf call is not properly checked before being used. This could lead to an integer overflow. Impact : A remote attacker could sen...

tcpdump: Integer overflow

Background tcpdump is a tool for capturing and inspecting network traffic. Description mu-b from Digital Labs discovered that the return value of a snprintf call is not properly checked before being used. This could lead to an integer overflow. Impact A remote attacker could send specially crafte...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2007:148)

An integer overflow in tcpdump could allow a remote attacker to execute arbitrary code via crafted TLVs in a BGP packet. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...