CVE-2014-8767: Undefined Security Weakness

Integer underflow in the olsrprint function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service crash via a crafted length value in an OLSR frame...

CVE-2014-8767

Integer underflow in the olsrprint function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service crash via a crafted length value in an OLSR frame...

PT-2014-8723

Name of the Vulnerable Software and Affected Versions tcpdump versions 4.5.0 through 4.6.2 Description The issue is related to multiple integer underflows in the geonet print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a...

PT-2014-8724

Name of the Vulnerable Software and Affected Versions tcpdump versions 3.8 through 4.6.2 Description The issue allows remote attackers to obtain sensitive information from memory or cause a denial of service, such as packet loss or segmentation fault, via a crafted Ad hoc On-Demand Distance Vecto...

PT-2014-8722

Name of the Vulnerable Software and Affected Versions tcpdump versions 3.9.6 through 4.6.2 Description The issue is related to an integer underflow in the olsr print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a crash, by sendi...

CVE-2014-8769

tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service packet loss or segmentation fault via a crafted Ad hoc On-Demand Distance Vector AODV packet, which triggers an out-of-bounds memory access...

Send Cisco Discovery Protocol (CDP) Packets

This module sends Cisco Discovery Protocol CDP packets. Note that any responses to the CDP packets broadcast from this module will need to be analyzed with an external packet analysis tool, such as tcpdump or Wireshark in order to learn more about the Cisco switch and router environment. This...

tcpdump 4.6.2 Geonet Denial Of Service

CVE-2014-8768 tcpdump denial of service in verbose mode using malformed Geonet payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is...

tcpdump 4.6.2 OSLR Denial Of Service

CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attache...

tcpdump 4.6.2 AOVD Unreliable Output

CVE-2014-8769 tcpdump unreliable output using malformed AOVD payload 1. Background tcpdump is a powerful command-line packet analyzer. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attached. 2. Summary...

TCPDump 3.x Malformed ISAKMP Packet Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6974/info It has been reported that tcpdump is vulnerable to a denial of service when some packet types are received. By sending a maliciously formatted packet to a system using a vulnerable version of tcpdump, it is...

Huawei EchoLife HG520 Remote Information Disclosure

No description provided by source. Exploit Title: Huawei EchoLife HG520 Remote Information Disclosure Date: 2010-04-19 Author: hkm Product Link: http://www.huawei.com/mobileweb/en/products/view.do?id=660 Firmware Versions: 3.10.18.7-1.0.7.0 3.10.18.5-1.0.7.0 3.10.18.4 Software Versions:...

tcpdump Print-bgp.C Remote Integer Underflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24965/info The 'tcpdump' utility is prone to an integer-underflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. An attacker can exploit th...

Ethereal 0.8.4/0.8.5/0.8.6,tcpdump 3.4/3.5 alpha DNS Decode Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffers will attempt to decode DNS...

TCPDump 3.6/3.7 Malformed RADIUS Packet Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7090/info It has been reported that tcpdump is vulnerable to a denial of service when some packet types are received. By sending a maliciously formatted packet to a system using a vulnerable version of tcpdump, it is...

Tcpdump 3.x L2TP Parser Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9263/info A vulnerability has been reported to exist in the software that may allow a remote attacker to cause a denial of service condition in tcpdump. The issue presents itself when an attacker sends a maliciously...

tcpdump 3.4 Protocol Four and Zero Header Length Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/313/info A vulnerability in tcpdump causes it to enter an infinite loop within the procedure ipprint from the file printip.c when it receives a packet with IP protocol number four and a zero header length and it tries to...

Ethereal 0.8.4/0.8.5/0.8.6,tcpdump 3.4/3.5 alpha DNS Decode Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffers will attempt to decode DNS...

tcpdump 3.4/3.5 AFS ACL Packet Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1870/info tcpdump is a popular network monitoring tool used for watching network traffic written by the Lawrence Berkeley Laboratory. It must at least begin execution as root since it opens and reads from the link layer...

Smart Pentester - An SSH based Penetration Testing Framework

Smart Pentester is an SSH based Penetration Testing Framework. It provides a GUI for well known tools like nmap, hping, tcpdump, volatility, hydra and etc. Smart Pentester Framework will provide you a User Interface for Penetration testing, Malware Analysis, Forensic Analysis, Cyber Intelligence,...