Ubuntu 4.10 / 5.04 : tcpdump vulnerability (USN-141-1)

It was discovered that certain invalid BGP packets triggered an infinite loop in tcpdump, which caused tcpdump to stop working. This could be abused by a remote attacker to bypass tcpdump analysis of network traffic. Note that Tenable Network Security has extracted the preceding description block...

BGP (Border Gateway Protocol) Service Detection

The remote host is running a BGP Border Gateway Protocol service. Description : The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a...

Debian DSA-854-1 : tcpdump - infinite loop

Simon Nielsen discovered that the BGP dissector in tcpdump, a powerful tool for network monitoring and data acquisition, does not properly handle a -1 return value from an internal function that decodes data packets. A specially crafted BGP packet can cause a denial of service via an infinite loo...

[SECURITY] [DSA 854-1] New tcpdump packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 854-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 854-1] New tcpdump packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 854-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 850-1] New tcpdump packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 850-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 850-1] New tcpdump packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 850-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...

DSA-854-1 tcpdump - infinite loop

Bulletin has no description...

DSA-850-1 tcpdump - denial of service

Bulletin has no description...

[Full-disclosure] ICMP attacks against TCP: Conclusions

Folks, My posts to this list have tried to show how easy it is to perform ICMP attacks against TCP. The attacks are blind, so the attacker does not need to be a "man in the middle" to perform then. The typical number of packets required to perform any of these attacks is about 16000 in many cases...

Slackware 10.0 / 10.1 / 8.1 / 9.0 / 9.1 / current : tcpdump DoS (SSA:2005-195-10)

New tcpdump packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix a security issue. A specially crafted BGP packet can cause tcpdump to go into an infinite loop, creating a denial of service where network monitoring is disabled. %NASLMINLEVEL 70300 C Tenable Network...

tcpdump DoS

New tcpdump packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix a security issue. A specially crafted BGP packet can cause tcpdump to go into an infinite loop, creating a denial of service where network monitoring is disabled. More details about this issue may be...

ICMP vulnerabilities

Much more information on the ICMP vulnerabilities that allow you to blindly tear down TCP sessions. http://kerneltrap.org/node/5382 Please note these are not man-in-the-middle attacks. You can do them blind. Totally blind. You do not need to know any information. There are three attacks outlined...

Fedora Core 4 : tcpdump-3.8.2-13.FC4 (2005-407)

Tue Jun 7 2005 Martin Stransky - 14:3.8.2-13.FC4 - fix for CVE-2005-1267 - BGP DoS, 159209 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

USN-141-1: tcpdump vulnerability

It was discovered that certain invalid BGP packets triggered an infinite loop in tcpdump, which caused tcpdump to stop working. This could be abused by a remote attacker to bypass tcpdump analysis of network traffic...

Another tcpdump BGP infinite loop vulnerability (CAN-2005-1267)

Hello While working on the FreeBSD Security Advisory for the recent tcpdump issues CAN-2005-1278, CAN-2005-1279, and CAN-2005-1280 I noticed another similar infinite loop DoS vulnerability in the BGP handling code. It affects at least tcpdump 3.8.3 and tcpdump 3.9 snapshots from before May 5. The...

CVE-2005-1267

The CVE-2005-1267 issue affects the BGP dissector in tcpdump (v3.x). The vuln arises when bgp_update_print fails to handle a -1 return from decode_prefix4, enabling a remote attacker to trigger a denial-of-service via an infinite loop by sending a crafted BGP packet. The impact is a DoS on affect...

CVE-2005-1267

The bgpupdateprint function in tcpdump 3.x does not properly handle a -1 return value from the decodeprefix4 function, which allows remote attackers to cause a denial of service infinite loop via a crafted BGP packet...

CVE-2005-1267

The bgpupdateprint function in tcpdump 3.x does not properly handle a -1 return value from the decodeprefix4 function, which allows remote attackers to cause a denial of service infinite loop via a crafted BGP packet...

CVE-2005-1267

The bgpupdateprint function in tcpdump 3.x does not properly handle a -1 return value from the decodeprefix4 function, which allows remote attackers to cause a denial of service infinite loop via a crafted BGP packet...