PT-2005-2274 · Tcpdump+1 · Tcpdump+1

Simon L. Nielsen · Published 2005-06-10 · Updated 2018-10-19 · CVE-2005-1267

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: tcpdump versions 3.x

Description: The issue arises from the bgp update print function not properly handling a -1 return value from the decode prefix4 function. This allows remote attackers to cause a denial of service, resulting in an infinite loop, via a crafted BGP packet.

Recommendations: For tcpdump versions 3.x, consider disabling the bgp update print function as a temporary workaround until a patch is available. Restrict access to the decode prefix4 function to minimize the risk of exploitation. Avoid processing crafted BGP packets in the affected tcpdump versions until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2005-1267

DSA-854-1

RHSA-2005:505

RHSA-2005_505

Affected Products

Red Hat

Tcpdump

References · 17

• 🔥 https://exploit-db.com/exploits/1037 · Exploit
• http://redhat.com/archives/fedora-announce-list/2005-June/msg00007.html · Vendor Advisory
• http://debian.org/security/2005/dsa-854 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1267 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1267 · Vendor Advisory
• http://securityfocus.com/archive/1/430292/100/0/threaded · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-1267 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-1267 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-505.html · Vendor Advisory
• http://secunia.com/advisories/15634 · Vendor Advisory
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159208 · Vendor Advisory
• http://trustix.org/errata/2005/0028 · Vendor Advisory
• http://securityfocus.com/bid/13906 · Note
• https://redhat.com/security/data/cve/CVE-2005-1267.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11148 · Note