Record summary

CVE-2000-0333 has a selected CVSS score of 5.0; EIP currently links 2 catalogued exploits.

Description

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBEthereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (1)ExploitDB exploitby Hugo BretonNot analyzed1 file
ExploitDB

PoC details
ExploitDBEthereal 0.8.4/0.8.5/0.8.6 / tcpdump 3.4/3.5 alpha - DNS Decode (2)ExploitDB exploitby scutNot analyzed1 file
ExploitDB

PoC details

References

4