Secunia Logo
Netsikker nu! 2008
 
Debian update for tcpdump
Secunia Advisory: SA26404
Release Date: 2007-08-13
Popularity: 4,054 views

Critical:
Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 3.1
Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-3798


Description:
Debian has issued an update for tcpdump. This fixes a vulnerability, which potentially can be exploited by malicious people to compromise a user's system.

For more information:
SA26135

Solution:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.8.3-5sarge3.dsc
Size/MD5 checksum:666 e32b72a8df4e27d5006154677c7b097b
http://security.debian.org/pool/updat...tcpdump/tcpdump_3.8.3-5sarge3.diff.gz
Size/MD5 checksum:12704 0e326644d730276bb4b815d9f37345d9
http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.8.3.orig.tar.gz
Size/MD5 checksum: 567116 30645001f4b97019677cad88d3811904

Alpha architecture:

http://security.debian.org/pool/updat...pdump/tcpdump_3.8.3-5sarge3_alpha.deb
Size/MD5 checksum: 300756 54ea3bbd5aa02d32d85c3d8faec2f549

AMD64 architecture:

http://security.debian.org/pool/updat...pdump/tcpdump_3.8.3-5sarge3_amd64.deb
Size/MD5 checksum: 256668 8139017aeae727217aef01f3d49b1f34

ARM architecture:

http://security.debian.org/pool/updat...tcpdump/tcpdump_3.8.3-5sarge3_arm.deb
Size/MD5 checksum: 250676 415be1aa1ecd70dcdb2ca2b34f090ef5

HP Precision architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.8.3-5sarge3_hppa.deb
Size/MD5 checksum: 271786 102e5c7cc4fbe33fe4e7a8d73e2f6ff5

Intel IA-32 architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.8.3-5sarge3_i386.deb
Size/MD5 checksum: 238936 1d457b74f3c451d3386c0011c5d3d401

Intel IA-64 architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.8.3-5sarge3_ia64.deb
Size/MD5 checksum: 352630 f2b0e63005ae8d91e167e1d922d3ed63

Motorola 680x0 architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.8.3-5sarge3_m68k.deb
Size/MD5 checksum: 216930 f369e13bd8ea6461bc4cc773bcca2bed

Big endian MIPS architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.8.3-5sarge3_mips.deb
Size/MD5 checksum: 259606 e9de1c9d78d968b670cb928008526d6b

Little endian MIPS architecture:

http://security.debian.org/pool/updat...dump/tcpdump_3.8.3-5sarge3_mipsel.deb
Size/MD5 checksum: 272276 e46bc79da49148f51bd33e75571629e3

PowerPC architecture:

http://security.debian.org/pool/updat...ump/tcpdump_3.8.3-5sarge3_powerpc.deb
Size/MD5 checksum: 246564 4e9d753a878b422335ae6c2d9b9f16ff

IBM S/390 architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.8.3-5sarge3_s390.deb
Size/MD5 checksum: 247366 5ada5e66c61bdc642efad9a13feec449

Sun Sparc architecture:

http://security.debian.org/pool/updat...pdump/tcpdump_3.8.3-5sarge3_sparc.deb
Size/MD5 checksum: 248204 61e64e1e06f9fec8f3bb55b9d49740ce

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.9.5-2etch1.dsc
Size/MD5 checksum:624 f1cb312ffc30a5f23e3b9441f1dc9816
http://security.debian.org/pool/updat.../tcpdump/tcpdump_3.9.5-2etch1.diff.gz
Size/MD5 checksum:11790 b142686b5c398d103060bf1c19640062
http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.9.5.orig.tar.gz
Size/MD5 checksum: 712411 2135e7b1f09af0eaf66d2af822bed44a

Alpha architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.9.5-2etch1_alpha.deb
Size/MD5 checksum: 361418 7d417c516560ae3f491e2a69a2e92852

AMD64 architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.9.5-2etch1_amd64.deb
Size/MD5 checksum: 315696 85ab047b978272390e321f7b82b78a54

ARM architecture:

http://security.debian.org/pool/updat.../tcpdump/tcpdump_3.9.5-2etch1_arm.deb
Size/MD5 checksum: 318102 850c71edf0435220ca82a79bdede55c3

HP Precision architecture:

http://security.debian.org/pool/updat...tcpdump/tcpdump_3.9.5-2etch1_hppa.deb
Size/MD5 checksum: 334214 36e5e7720c0be0c0c65781478e690e58

Intel IA-32 architecture:

http://security.debian.org/pool/updat...tcpdump/tcpdump_3.9.5-2etch1_i386.deb
Size/MD5 checksum: 302930 8ca411b3fd819e1128aaf9cfd9e9b236

Intel IA-64 architecture:

http://security.debian.org/pool/updat...tcpdump/tcpdump_3.9.5-2etch1_ia64.deb
Size/MD5 checksum: 444780 a9d5ef9956acc9faa8d4ad239f11a212

Little endian MIPS architecture:

http://security.debian.org/pool/updat...pdump/tcpdump_3.9.5-2etch1_mipsel.deb
Size/MD5 checksum: 333760 7d6136acde3c46d6e4ed842d73f79e2d

PowerPC architecture:

http://security.debian.org/pool/updat...dump/tcpdump_3.9.5-2etch1_powerpc.deb
Size/MD5 checksum: 304530 f0711d43c19850fd71a357f063271343

IBM S/390 architecture:

http://security.debian.org/pool/updat...tcpdump/tcpdump_3.9.5-2etch1_s390.deb
Size/MD5 checksum: 303136 95410cd0a68d9951257512962809cf84

Sun Sparc architecture:

http://security.debian.org/pool/updat...cpdump/tcpdump_3.9.5-2etch1_sparc.deb
Size/MD5 checksum: 309198 4e9f05bce4eee5d56bc57564ea8f79cb

-- Debian GNU/Linux unstable alias sid --

Fixed in version 3.9.5-3.

Original Advisory:
http://lists.debian.org/debian-securi...-security-announce-2007/msg00115.html

Other References:
SA26135:
http://secunia.com/advisories/26135/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. My PHP Indexer "d" File Disclosure Vulnerability // 87 views
2. NewLife Blogger "nlb3" SQL Injection Vulnerability // 76 views
3. WinFTP "PASV" Denial of Service Vulnerability // 76 views
4. Ayco Okul "linkid" SQL Injection Vulnerability // 66 views
5. ScriptsEz Mini Hosting Panel "dir" File Disclosure // 53 views
6. Joomla Ignite Gallery Component "gallery" SQL Injection // 50 views
7. Real Estates Classifieds "cat" SQL Injection Vulnerability // 47 views
8. IceWarp Web Mail Two File Inclusion Vulnerabilities // 42 views
9. Joomla Mad4Joomla Mailforms Component "jid" SQL Injection // 41 views
10. Apache Tomcat "RemoteFilterValve" Security Bypass Security Issue // 40 views