tcpdump vulnerabilities

Related Vulnerabilities: CVE-2005-1278   CVE-2005-1279   CVE-2005-1280  

It was discovered that certain invalid GRE, LDP, BGP, and RSVP packets triggered infinite loops in tcpdump, which caused tcpdump to stop working. This could be abused by a remote attacker to bypass tcpdump analysis of network traffic.

The problem can be corrected by updating your system to the following package versions:

6 May 2005

tcpdump vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 5.04
  • Ubuntu 4.10

Software Description

Details

It was discovered that certain invalid GRE, LDP, BGP, and RSVP packets triggered infinite loops in tcpdump, which caused tcpdump to stop working. This could be abused by a remote attacker to bypass tcpdump analysis of network traffic.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 5.04
tcpdump
Ubuntu 4.10
tcpdump

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

References