CVE-2004-0057 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2004-0057
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0057

Description: The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/14837 TRUSTIX http://lwn.net/Alerts/66445/ ST 1008716 SGI SCO SAID Secunia Advisory: SA10636 Secunia Advisory: SA10639 Secunia Advisory: SA10644 Secunia Advisory: SA10652 Secunia Advisory: SA10668 Secunia Advisory: SA10718 Secunia Advisory: SA11022 Secunia Advisory: SA11032 Secunia Advisory: SA12179 REDHAT http://www.redhat.com/support/errata/RHSA-2004-008.html http://www.redhat.com/support/errata/RHSA-2004-007.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:851 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:854 MLIST http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html http://marc.theaimsgroup.com/?l=tcpdump-workers&m=107325073018070&w=2 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2004:008 FEDORA http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html ENGARDE http://lwn.net/Alerts/66805/ DEBIAN http://www.debian.org/security/2004/dsa-425 CERT-VN 174086 CALDERA BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=107577418225627&w=2 http://www.securityfocus.com/archive/1/archive/1/350238/30/21640/threaded BID 9423 APPLE http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html

Return to the previous page.