CVE-2004-0184
tcpdump < 3.8.1 - Denial of Service via ISAKMP Identification Payload Length Underflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-0184. PoCs published by Rapid7.
AI-analyzed exploit summary This exploit triggers an integer underflow in tcpdump's ISAKMP Identification payload parsing, causing a denial of service (DoS) when tcpdump is run with verbosity level 3 or higher. The PoC sends a malformed packet to the target host on the ISAKMP port (UDP 500).
Description
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Exploits (1)
This exploit triggers an integer underflow in tcpdump's ISAKMP Identification payload parsing, causing a denial of service (DoS) when tcpdump is run with verbosity level 3 or higher. The PoC sends a malformed packet to the target host on the ISAKMP port (UDP 500).