Secunia

mu-b has reported a vulnerability in tcpdump, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the incorrect use of the return value of "snprintf()" in print-bgp.c. This can be exploited to cause a buffer overflow by sending specially crafted BGP packets.

Successful exploitation may allow the execution of arbitrary code.

The vulnerability is reported in version 3.9.6. Other versions may also be affected.

Solution
Fixed in the SVN repository.
Further details available in Customer Area

Provided and/or discovered by
mu-b, digit-labs.org

Original Advisory
http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c

Deep Links
Links available in Customer Area