[SECURITY] [DSA 1353-1] New tcpdump packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1353-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 11th, 2007 http://www.debian.org/security/faq -...

DSA-1353-1 tcpdump - integer overflow

Bulletin has no description...

Fedora Core 6 : tcpdump-3.9.4-11.fc6 (2007-654)

CVE-2007-3798 Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value. Note that Tenable Network Security has extracted the preceding description...

[SECURITY] Fedora Core 6 Update: tcpdump-3.9.4-11.fc6

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

FreeBSD : FreeBSD -- Buffer overflow in tcpdump(1) (2dc764fa-40c0-11dc-aeac-02e0185f8d72)

An un-checked return value in the BGP dissector code can result in an integer overflow. This value is used in subsequent buffer management operations, resulting in a stack based buffer overflow under certain circumstances. Impact : By crafting malicious BGP packets, an attacker could exploit this...

FreeBSD-SA-07:06.tcpdump

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:06.tcpdump Security Advisory The FreeBSD Project Topic: Buffer overflow in tcpdump1 Category: contrib Module: tcpdump Announced: 2007-08-01 Credits: "mu-b"...

FreeBSD -- Buffer overflow in tcpdump(1)

Problem Description: An un-checked return value in the BGP dissector code can result in an integer overflow. This value is used in subsequent buffer management operations, resulting in a stack based buffer overflow under certain circumstances. Impact: By crafting malicious BGP packets, an attacke...

[SECURITY] Fedora 7 Update: tcpdump-3.9.7-1.fc7

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...

FreeBSD : tcpdump -- remote integer underflow vulnerability (983) (deprecated)

The remote host is missing an update to the system The following package is affected: tcpdump This plugin is deprecated by plugin ID 25833, freebsdpkgff284bf03f3211dca79a0016179b2dd5.nasl %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the VuXML entry has been superseded by...

GLSA-200707-14 : tcpdump: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200707-14 tcpdump: Integer overflow mu-b from Digital Labs discovered that the return value of a snprintf call is not properly checked before being used. This could lead to an integer overflow. Impact : A remote attacker could sen...

tcpdump: Integer overflow

Background tcpdump is a tool for capturing and inspecting network traffic. Description mu-b from Digital Labs discovered that the return value of a snprintf call is not properly checked before being used. This could lead to an integer overflow. Impact A remote attacker could send specially crafte...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2007:148)

An integer overflow in tcpdump could allow a remote attacker to execute arbitrary code via crafted TLVs in a BGP packet. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

rPSA-2007-0147-1 tcpdump

rPath Security Advisory: 2007-0147-1 Published: 2007-07-20 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect System User Deterministic Unauthorized Access Updated Versions: tcpdump=/conary.rpath.com@rpl:devel//1/3.9.5-2.1-1 References:...

DEBIAN-CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...

Integer overflow

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...

CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...

CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...

CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...

CVE-2007-3798

CVE-2007-3798 affects tcpdump’s BGP dissector: an integer overflow in print-bgp.c in tcpdump 3.9.6 and earlier allows remote code execution via crafted BGP TLVs. Impact: arbitrary code execution with the pcap user’s privileges when processing BGP packets. Remediation is via updated tcpdump packag...

CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value...