Searching tcpdump software vulnerabilities

ip_print procedure in Tcpdump 3.4a allows remot

procedure | attackers | infinite | ip_print | service | Tcpdump | length | packet | causes | header | denial | allows | remote | prints | which | cause | core | loop | dump | zero | 34a | via |

ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.


tcpdump, Ethereal, and other sniffer packages a

decompressing | attackers | malformed | Ethereal | packages | infinite | service | packets | tcpdump | sniffer | itself | causes | offset | refers | packet | denial | remote | enter | other | cause | allow | while | which | loop | jump | via | DNS |

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.


Sustworks IPNetSentryX and IPNetMonitorX allow

IPNetMonitorX | applications | IPNetSentryX | Sustworks | packets | network | helper | setuid | local | allow | users | sniff | via |

Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications (1) RunTCPDump, which calls tcpdump, and (2) RunTCPFlow, which calls tcpflow.


tcpdump before 3.8.1 allows remote attackers to

tcpdump | before |

tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.


The L2TP protocol parser in tcpdump 3.8.1 and e

protocol | tcpdump | parser | L2TP |

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.


The print_attr_string function in print-radius.

print_attr_string | print-radiusc | function | tcpdump |

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.


The rawprint function in the ISAKMP decoding ro

routines | decoding | rawprint | function | ISAKMP |

The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.


TCPDUMP 3.8.1 and earlier allows remote attacke

TCPDUMP |

TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.


Integer underflow in the isakmp_id_print for TC

isakmp_id_print | underflow | TCPDUMP | Integer |

Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.


The bgp_update_print function in tcpdump 3.x do

bgp_update_print | decode_prefix4 | attackers | function | properly | tcpdump | service | remote | allows | handle | denial | return | cause | value | which | does | not |

The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.


The isis_print function, as called by isoclns_p

isoclns_print | isis_print | function | tcpdump | called |

The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.


tcpdump 3.8.3 and earlier allows remote attacke

tcpdump |

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.


The rsvp_print function in tcpdump 3.9.1 and ea

rsvp_print | function | tcpdump |

The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.


Argument injection vulnerability in Barracuda S

vulnerability | Barracuda | injection | Firewall | firmware | Argument | running | Spam |

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.


** DISPUTED ** Microsoft Windows NT 4.0, Windo

Microsoft | DISPUTED | Windows |

** DISPUTED ** Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation."


Off-by-one buffer overflow in the parse_element

parse_elements | Off-by-one | function | overflow | buffer |

Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based.


Integer overflow in print-bgp.c in the BGP diss

print-bgpc | dissector | overflow | tcpdump | Integer | BGP |

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.


Software vulnerabilities results 1 to 18 of 18     
Page: 1