Secunia

RedHat has issued updated tcpdump packages. These fix two vulnerabilities, which can be exploited to cause a DoS (Denial of Service) or compromise a system.

1) When tcpdump sees a UDP packet originating from a radius port, it will try to decode the packet. If the packet contains a zero ("0") at the second byte, which is the length field of a radius header, tcpdump enters a loop generating an infinate stream of "#0#0#0#0#0". This can result in a DoS if the output is written to a file, since available space on the harddisk is consumed.

2) A boundary error identified in the BGP decoding routines can be exploited to cause a DoS or possibly execute arbitrary code on the system with the privileges of the user "pcap".

Solution
The following packages can be installed via RedHat Network (http://rhn.redhat.com/):
Further details available in Customer Area

Deep Links
Links available in Customer Area