PT-2003-1077 · Libpcap+2 · Libpcap+2

Published 2003-05-15 · Updated 2008-09-05 · CVE-2003-0194

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions tcpdump versions 3.6.3 and earlier libpcap version 0.6.2 arpwatch version 2.1a11

Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely. The problem with tcpdump is that it does not properly drop privileges to the pcap user when starting up.

Recommendations For tcpdump version 3.6.3, consider updating to a newer version that properly handles user privileges. For libpcap version 0.6.2, at the moment, there is no information about a newer version that contains a fix for this issue. For arpwatch version 2.1a11, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

BDU:2015-07981

BDU:2015-08151

BDU:2015-08224

CVE-2003-0194

Affected Products

Arpwatch

Libpcap

Tcpdump

References · 8

• https://bdu.fstec.ru/vul/2015-08224 · Security Note
• https://bdu.fstec.ru/vul/2015-08151 · Security Note
• http://redhat.com/support/errata/RHSA-2003-174.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07981 · Security Note
• http://redhat.com/support/errata/RHSA-2003-151.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0194 · Security Note
• https://rhn.redhat.com/errata/RHSA-2003-174.html · Note
• https://rhn.redhat.com/errata/RHSA-2004-007.html · Note