PT-2001-1093 · Tcpdump · Tcpdump

Published 2001-11-28 · Updated 2016-10-18 · CVE-1999-1024

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tcpdump version 3.4a

Description The issue allows remote attackers to cause a denial of service via a packet with a zero length header. This results in an infinite loop and core dump when Tcpdump prints the packet.

Recommendations For Tcpdump version 3.4a, consider updating to a newer version that addresses this issue, as the current version is affected by the denial of service vulnerability caused by packets with zero length headers.

Exploit

Fix

Related Identifiers

CVE-1999-1024

Affected Products

Tcpdump

References · 6

• 🔥 https://exploit-db.com/exploits/19251 · Exploit
• 🔥 http://securityfocus.com/bid/313 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1024 · Security Note
• http://marc.info/?l=bugtraq&m=92989907627051&w=2 · Note
• http://marc.info/?l=bugtraq&m=92963447601748&w=2 · Note
• http://marc.info/?l=bugtraq&m=92955903802773&w=2 · Note