CLA-2003:629Vendor advisory
http://distro.conectiva.com.br/atualizacoes?id=a&anuncio=000629 CVE-2003-0108
TCPDump 3.x - Malformed ISAKMP Packet Denial of Service
Record summary
CVE-2003-0108 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBTCPDump 3.x - Malformed ISAKMP Packet Denial of ServiceExploitDB exploitby The Salvia TwistNot analyzed1 file
References
Showing 12 of 1320030227 iDEFENSE Security Advisory 02.27.03: TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsinmailing list
http://marc.info/?l=bugtraq&m=104637420104189&w=2 20030304 [OpenPKG-SA-2003.014] OpenPKG Security Advisory (tcpdump)mailing list
http://marc.info/?l=bugtraq&m=104678787109030&w=2 DSA-255Vendor advisory
http://www.debian.org/security/2003/dsa-255 idefense.com
http://www.idefense.com/advisory/02.27.03.txt tcpdump-isakmp-dos(11434)vdb entry
http://www.iss.net/security_center/static/11434.php MDKSA-2003:027Vendor advisory
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027 SuSE-SA:2003:0015Vendor advisory
http://www.novell.com/linux/security/advisories/2003_015_tcpdump.html RHSA-2003:032Vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-032.html RHSA-2003:085Vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-085.html RHSA-2003:214Vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-214.html 6974vdb entry
http://www.securityfocus.com/bid/6974