PT-2003-1075 · Tcpdump · Tcpdump

Andrew Griffiths

·

Publicado

2003-03-07

·

Atualizado

2016-10-18

·

CVE-2003-0108

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions tcpdump versions 3.6 through 3.7.1
Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, via a certain malformed ISAKMP packet to UDP port 500, which causes the software to enter an infinite loop. Multiple vulnerabilities in the tcpdump package may lead to disruption of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.
Recommendations For tcpdump versions 3.6 through 3.7.1, consider disabling the isakmp sub print function as a temporary workaround until a patch is available. Restrict access to UDP port 500 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-07981
BDU:2015-08151
BDU:2015-08224
CVE-2003-0108
DSA-255

Produtos afetados

Tcpdump