1165vdb entry
http://www.securityfocus.com/bid/1165 CVE-2000-0333
Ethereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (1)
Record summary
CVE-2000-0333 has a selected CVSS score of 5.0; EIP currently links 2 catalogued exploits.
Description
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBEthereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (1)ExploitDB exploitby Hugo BretonNot analyzed1 file
ExploitDBEthereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (2)ExploitDB exploitby scutNot analyzed1 file
References
420000502 Denial of service attack against tcpdumpmailing list
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000%40paranoia.pgci.ca securityfocus.com
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000@paranoia.pgci.ca nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2000-0333