Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0333. PoCs published by scut, Hugo Breton.
AI-analyzed exploit summary The vulnerability in tcpdump and other sniffers (e.g., Ethereal) involves a DNS name compression flaw that triggers an infinite loop during packet decompression, leading to a DoS condition. This affects real-time packet analysis but not file-based logging.
Description
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Exploits (2)
The vulnerability in tcpdump and other sniffers (e.g., Ethereal) involves a DNS name compression flaw that triggers an infinite loop during packet decompression, leading to a DoS condition. This affects real-time packet analysis but not file-based logging.
This exploit demonstrates a DoS vulnerability in tcpdump and other sniffers by crafting a malformed DNS packet that triggers an infinite loop during decompression. The PoC sends a UDP packet to a target DNS server, causing tcpdump to hang when processing it.