Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-1267. PoCs published by simon.
AI-analyzed exploit summary This exploit code crafts a malformed BGP4 update message to trigger an infinite loop vulnerability in tcpdump (CVE-2005-1267). It uses libnet to construct a TCP packet with a BGP4 header and payload, designed to cause a denial-of-service condition.
Description
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.
Exploits (1)
This exploit code crafts a malformed BGP4 update message to trigger an infinite loop vulnerability in tcpdump (CVE-2005-1267). It uses libnet to construct a TCP packet with a BGP4 header and payload, designed to cause a denial-of-service condition.