PT-2003-1077 · Libpcap+2 · Libpcap+2

Publicado

2003-05-15

·

Atualizado

2008-09-05

·

CVE-2003-0194

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions tcpdump versions 3.6.3 and earlier libpcap version 0.6.2 arpwatch version 2.1a11
Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely. The problem with tcpdump is that it does not properly drop privileges to the pcap user when starting up.
Recommendations For tcpdump version 3.6.3, consider updating to a newer version that properly handles user privileges. For libpcap version 0.6.2, at the moment, there is no information about a newer version that contains a fix for this issue. For arpwatch version 2.1a11, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-07981
BDU:2015-08151
BDU:2015-08224
CVE-2003-0194

Produtos afetados

Arpwatch
Libpcap
Tcpdump