Moderate: Red Hat Security Advisory: tcpdump security update

Updated tcpdump, libpcap, and arpwatch packages are available to fix an incorrect bounds check when decoding BGP packets and a possible denial of service. Tcpdump is a command-line tool for monitoring network traffic. The BGP decoding routines in tcpdump before version 3.6.2 used incorrect bounds...

CVE-2002-1350

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service application crash...

CVE-2002-1350

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service application crash...

CVE-2002-1355

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service infinite loop via malformed messages...

DEBIAN-CVE-2002-1350

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service application crash...

CVE-2002-1355

CVE-2002-1355 affects Ethereal (now Wireshark) up to version 0.9.7, specifically the BGP dissector. The vulnerability arises from multiple integer signedness errors in the BGP dissector, which allow remote attackers to trigger a denial of service via malformed messages, causing an infinite loop. ...

CVE-2002-1355

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service infinite loop via malformed messages...

PT-2002-2278 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.9.7 and earlier Description: The issue is related to multiple integer signedness errors in the BGP dissector. This can be exploited by remote attackers who send malformed messages, resulting in a denial of service due to an...

[SECURITY] [DSA-206-1] tcpdump BGP decoding error

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-206-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 10, 2002 -...

tcpdump BGP buffer overflow

Buffer overflow on BGP packets decoding...

[SECURITY] [DSA-206-1] tcpdump BGP decoding error

------------------------------------------------------------------------ Debian Security Advisory DSA-206-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 10, 2002 - ------------------------------------------------------------------------ Package : tcpdump Problem...

DSA-206 tcpdump - denial of service

Bulletin has no description...

CVE-2002-0821

Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via 1 the BGP dissector, or 2 the WCP dissector...

CVE-2002-0821

CVE-2002-0821 affects Ethereal (now Wireshark) 0.9.4 and earlier, where buffer overflows in the BGP and WCP dissectors allow remote attackers to cause a denial of service or possibly execute arbitrary code. Connected sources confirm the affected component and version, and describe the root cause ...

CVE-2002-0821

Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via 1 the BGP dissector, or 2 the WCP dissector...

CVE-2001-0650

Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute...

CVE-2001-0650

CVE-2001-0650 affects Cisco IOS 12.0 and earlier. A BGP UPDATE containing an unrecognized transitive attribute can cause memory corruption, leading to router crashes or bad route updates, potentially disrupting networks. Cisco’s advisory states this is caused by BGP attribute processing in config...

CVE-2001-0650

Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute...

Cisco IOS BGP Attribute Corruption Vulnerability

...

Cisco IOS vulnerable to DoS via unrecognized transitive attribute in BGP UPDATE

Overview There is a denial-of-service vulnerability in several specific but common configurations of Cisco IOS. Description There is a problem involving BGP updates on Cisco routers with BGP4 Prefix Filtering and Inbound Route Maps enabled. A route update with an unrecognized transitive attribute...