Lucene search
SuseSUSE-SA:2004:002HistoryJan 14, 2004 - 2:14 p.m.
remote DoS in tcpdump
2004-01-1414:14:50
lists.opensuse.org
18
0.124 Low
EPSS
Percentile
94.9%
Tcpdump is a well known tool for administrators to analyze network traffic. There is a bug in the tcpdump code responsible for handling ISAKMP messages. This bug allows remote attackers to destroy a current tcpdump session by tricking the tcpdump program with evil ISAKMP messages to enter an endless loop.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 8.0 | i386 | tcpdump | < 3.6.2-330 | tcpdump-3.6.2-330.i386.rpm |
| openSUSE | 9.0 | x86_64 | tcpdump | < 3.7.2-68 | tcpdump-3.7.2-68.x86_64.rpm |
| openSUSE | 8.2 | i586 | tcpdump | < 3.7.1-341 | tcpdump-3.7.1-341.i586.rpm |
| openSUSE | 8.1 | i586 | tcpdump | < 3.7.1-341 | tcpdump-3.7.1-341.i586.rpm |
| openSUSE | 9.0 | i586 | tcpdump | < 3.7.2-72 | tcpdump-3.7.2-72.i586.rpm |
Related
openvas
openvas
Gentoo Security Advisory GLSA 200503-34 (mpg321)
2008-09-24 00:00:00
Debian: Security Advisory (DSA-411)
2008-01-17 00:00:00
Debian Security Advisory DSA 411-1 (mpg321)
2008-01-17 00:00:00
ubuntucve
ubuntucve
CVE-2003-0969
2004-01-20 00:00:00
cve
cve
debiancve
debiancve
nessus
nessus
Debian DSA-411-1 : mpg321 - format string vulnerability
2004-09-29 00:00:00
GLSA-200503-34 : mpg321: Format string vulnerability
2005-03-29 00:00:00
GLSA-200404-03 : Tcpdump Vulnerabilities in ISAKMP Parsing
2004-08-30 00:00:00
securityvulns
securityvulns
[Full-disclosure] [ GLSA 200503-34 ] mpg321: Format string vulnerability
2005-03-28 00:00:00
R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities
2004-03-24 00:00:00
gentoo
gentoo
mpg321: Format string vulnerability
2005-03-28 00:00:00
Tcpdump Vulnerabilities in ISAKMP Parsing
2004-03-31 00:00:00
osv
osv
mpg321 - format string vulnerability
2004-01-05 00:00:00
tcpdump - multiple vulnerabilities
2004-01-16 00:00:00
debian
debian
[SECURITY] [DSA 411-1] New mpg321 packages fix format string vulnerability
2004-01-05 00:00:00
[SECURITY] [DSA 425-1] New tcpdump packages fix multiple vulnerabilities
2004-01-16 00:00:00
cert
cert
tcpdump contains vulnerability in ISAKMP decoding routine
2004-01-16 00:00:00
redhat
redhat
(RHSA-2004:008) tcpdump security update
2004-01-16 00:00:00
freebsd
freebsd
L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump
2003-12-24 00:00:00