CVE-2005-1280
tcpdump < 3.9.1 - Denial of Service via RSVP Packet Length 4
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-1280. PoCs published by vade79.
AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in tcpdump and Ethereal (now Wireshark) by sending a malformed RSVP packet that triggers an infinite loop in the rsvp_print() function. The payload is crafted to exploit a zero-length condition in RSVP_OBJ_ERO/RRO handling.
Description
The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.
Exploits (1)
This exploit targets a denial-of-service vulnerability in tcpdump and Ethereal (now Wireshark) by sending a malformed RSVP packet that triggers an infinite loop in the rsvp_print() function. The payload is crafted to exploit a zero-length condition in RSVP_OBJ_ERO/RRO handling.