5
CVSSv2

CVE-2004-0184

Published: 04/05/2004 Updated: 15/02/2024
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and previous versions allows remote malicious users to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.

Vulnerable Product Search on Vulmon Subscribe to Product

tcpdump tcpdump

Vendor Advisories

Synopsis tcpdump security update Type/Severity Security Advisory: Low Topic Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities inISAKMP parsing Description Tcpdump is a command-line tool for monitoring network traffic Tcpdump v381 and earlier versions contained multiple ...

Exploits

/* * tcpdump packet sniffer * Integer underflow in ISAKMP Identification payload * denial of service vulnerability * proof of concept code * version 10 (Apr 02 2004) * CVE-ID: CAN-2004-0184 * * by Remi Denis-Courmont < exploit at simphalampin dot com > * www simphalempin com dev * Remi Denis-Courmont is not responsible for the m ...