CVE-2003-0093: Undefined Security Weakness

The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service crash via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop...

CVE-2001-1279: Undefined Security Weakness

Buffer overflow in print-rx.c of tcpdump 3.x probably 3.6x allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026...

GLSA-200404-03 : Tcpdump Vulnerabilities in ISAKMP Parsing

The remote host is affected by the vulnerability described in GLSA-200404-03 Tcpdump Vulnerabilities in ISAKMP Parsing There are two specific vulnerabilities in tcpdump, outlined in reference 1 . In the first scenario, an attacker may send a specially crafted ISAKMP Delete packet which causes...

tcpdump contains buffer overflow vulnerability in ISAKMP "Delete Payload" handling

Overview A vulnerability in tcpdump could allow a remote attacker to cause a denial of service on an affected system. Description The tcpdump tool allows for the inspection of network packets and contains decoders for many standard protocols, including the Internet Security Association and Key...

tcpdump contains integer underflow vulnerability in ISAKMP "Identification Payload" handling

Overview A vulnerability in tcpdump could allow a remote attacker to cause a denial of service on an affected system. Description The tcpdump tool allows for the inspection of network packets and contains decoders for many standard protocols, including the Internet Security Association and Key...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2004:030)

A number of vulnerabilities were discovered in tcpdump versions prior to 3.8.1 that, if fed a maliciously crafted packet, could be exploited to crash tcpdump. These vulnerabilities include : Remote attackers can cause a denial of service crash via ISAKMP packets containing a Delete payload with a...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2002:032)

Several buffer overflows were found in the tcpdump package by FreeBSD developers during a code audit, in versions prior to 3.5. However, newer versions of tcpdump, including 3.6.2, are also vulnerable to another buffer overflow in the AFS RPC decoding functions, which was discovered by Nick...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2003:027)

A vulnerability was discovered by Andrew Griffiths and iDEFENSE Labs in the tcpdump program. By sending a specially crafted network packet, an attacker is able to to cause tcpdump to enter an infinite loop. In addition, the tcpdump developers found a potential infinite loop when tcpdump parses...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2001:056)

A number of remote buffer overflows were discovered in the tcpdump package that would allow a remote attack of the local tcpdump process. Intrusion detection using tcpdump would no longer be useful due to the attack stoping all network activity on the system. As well, this new version of tcpdump...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2004:008)

A number of vulnerabilities were discovered in tcpdump versions prior to 3.8.1 that, if fed a maliciously crafted packet, could be exploited to crash tcpdump or potentially execute arbitrary code with the privileges of the user running tcpdump. These vulnerabilities include : An infinite loop and...

SuSE-SA:2004:002: tcpdump

The remote host is missing the patch for the advisory SuSE-SA:2004:002 tcpdump. Tcpdump is a well known tool for administrators to analyze network traffic. There is a bug in the tcpdump code responsible for handling ISAKMP messages. This bug allows remote attackers to destroy a current tcpdump...

SUSE-SA:2003:0015: tcpdump

The remote host is missing the patch for the advisory SUSE-SA:2003:0015 tcpdump. The network traffic analyzer tool tcpdump is vulnerable to a denial-of- service condition while parsing ISAKMP or BGP packets. This bug can be exploited remotely by an attacker to stop the use of tcpdump for analyzin...

Fedora Core 1 : tcpdump-3.7.2-7.fc1.1 (2004-090)

Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities in ISAKMP and RADIUS parsing. Tcpdump is a command-line tool for monitoring network traffic. George Bakos discovered flaws in the ISAKMP decoding routines of tcpdump versions prior to 3.8.1. The Common Vulnerabilities and Exposur...

Fedora Core 1 : tcpdump-3.7.2-8.fc1.2 (2004-120)

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump v3.8.1 and earlier versions contained multiple flaws in the packet display functions for the ISAKMP protocol. Upon receiving specially crafted ISAKMP packets, TCPDUMP would try to read beyond the end of the packet capture buff...

Fedora Core 1 : tcpdump-3.7.2-8.fc1.1 (2004-092)

Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities in ISAKMP and RADIUS parsing. Tcpdump is a command-line tool for monitoring network traffic. George Bakos discovered flaws in the ISAKMP decoding routines of tcpdump versions prior to 3.8.1. The Common Vulnerabilities and Exposur...

RHEL 2.1 : tcpdump (RHSA-2002:121)

Updated tcpdump, libpcap, and arpwatch packages are available. These updates close a buffer overflow when handling NFS packets. tcpdump is a command-line tool for monitoring network traffic. Versions of tcpdump up to and including 3.6.2 have a buffer overflow that can be triggered when tracing th...

RHEL 2.1 : tcpdump (RHSA-2003:151)

Updated tcpdump packages that fix an infinite loop vulnerability and drop privileges on startup are now available. Tcpdump is a command-line tool for monitoring network traffic. A vulnerability exists in tcpdump before 3.7.2 and is related to an inability to handle unknown RADIUS attributes...

FreeBSD : L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump (192)

The following package needs to be updated: tcpdump %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg96ba2dae4ab011d896f20020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : tcpdump (RHSA-2003:085)

Updated tcpdump packages are available to fix a denial of service vulnerability in tcpdump. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Tcpdump is a command-line tool for monitoring network traffic. The ISAKMP parser in tcpdump 3.6 through...

RHEL 2.1 / 3 : tcpdump (RHSA-2004:008)

Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities in ISAKMP and RADIUS parsing. Updated 15 Jan 2004 Updated the text description to better describe the vulnerabilities found by Jonathan Heusser and give them CVE names. Tcpdump is a command-line tool for monitoring network traffi...