PT-2004-1353 · Tcpdump · Tcpdump

Published 2004-04-06 · Updated 2024-02-15 · CVE-2004-0184

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions tcpdump versions 3.8.1 and earlier

Description The issue is caused by an integer underflow in the isakmp id print function for TCPDUMP, allowing remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload. The payload's length becomes less than 8 during byte order conversion, resulting in an out-of-bounds read. This has been demonstrated using the Striker ISAKMP Protocol Test Suite.

Recommendations For versions 3.8.1 and earlier, update to a version later than 3.8.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Integer Underflow

Weakness Enumeration

CWE-125

CWE-191

Related Identifiers

CVE-2004-0184

DSA-478

RHSA-2004:219

Affected Products

Tcpdump

References · 20

• 🔥 http://rapid7.com/advisories/R7-0017.html · Exploit
• 🔥 https://exploit-db.com/exploits/171 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0184 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2004-0184 · Vendor Advisory
• http://trustix.org/errata/2004/0015 · Vendor Advisory
• https://bugzilla.fedora.us/show_bug.cgi?id=1468 · Vendor Advisory
• http://debian.org/security/2004/dsa-478 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0184 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0184 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-219.html · Vendor Advisory
• http://securitytracker.com/id?1009593 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9581 · Note
• http://securityfocus.com/bid/10004 · Note
• https://t.me/cvenotify/71671 · Telegram Post
• http://kb.cert.org/vuls/id/492558 · Note