National Cyber-Alert System

Vulnerability Summary for CVE-2003-0989

Overview

tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#738518

Name: VU#738518

Type: Advisory

Hyperlink:http://www.kb.cert.org/vuls/id/738518

External Source: REDHAT

Name: RHSA-2004:007

Type: Advisory; Patch Information

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-007.html

External Source: DEBIAN

Name: DSA-425

Type: Advisory; Patch Information

Hyperlink:http://www.debian.org/security/2004/dsa-425

External Source: BUGTRAQ

Name: 20040119 [ESA-20040119-002] 'tcpdump' multiple vulnerabilities.

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/350238/30/21640/threaded

External Source: REDHAT

Name: RHSA-2004:008

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-008.html

External Source: MLIST

Name: [fedora-announce-list] 20040311 Re: [SECURITY] Fedora Core 1 Update: tcpdump-3.7.2-8.fc1.1

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html

External Source: FEDORA

Name: FEDORA-2004-092

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html

External Source: FEDORA

Name: FEDORA-2004-090

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html

External Source: SECUNIA

Name: 12179

Hyperlink:http://secunia.com/advisories/12179/

External Source: SECUNIA

Name: 11032

Hyperlink:http://secunia.com/advisories/11032/

External Source: SECUNIA

Name: 11022

Hyperlink:http://secunia.com/advisories/11022

External Source: SECUNIA

Name: 10718

Hyperlink:http://secunia.com/advisories/10718

External Source: SECUNIA

Name: 10668

Hyperlink:http://secunia.com/advisories/10668

External Source: SECUNIA

Name: 10652

Hyperlink:http://secunia.com/advisories/10652

External Source: SECUNIA

Name: 10644

Hyperlink:http://secunia.com/advisories/10644

External Source: SECUNIA

Name: 10639

Hyperlink:http://secunia.com/advisories/10639

External Source: SECUNIA

Name: 10637

Hyperlink:http://secunia.com/advisories/10637

External Source: SECUNIA

Name: 10636

Hyperlink:http://secunia.com/advisories/10636

External Source: ENGARDE

Name: ESA-20040119-002

Hyperlink:http://lwn.net/Alerts/66805/

External Source: TRUSTIX

Name: 2004-0004

Hyperlink:http://lwn.net/Alerts/66445/

External Source: APPLE

Name: APPLE-SA-2004-02-23

Hyperlink:http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html

External Source: SGI

Name: 20040103-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc

External Source: SCO

Name: SCOSA-2004.9

Hyperlink:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt

External Source: CALDERA

Name: CSSA-2004-008.0

Hyperlink:ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt

External Source: SECTRACK

Name: 1008716

Hyperlink:http://www.securitytracker.com/id?1008716

External Source: BID

Name: 9507

Hyperlink:http://www.securityfocus.com/bid/9507

External Source: FEDORA

Name: FLSA:1222

Hyperlink:http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html

External Source: MANDRAKE

Name: MDKSA-2004:008

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2004:008

External Source: BUGTRAQ

Name: 20040131 [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths)

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=107577418225627&w=2

External Source: SGI

Name: 20040202-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc

US Government Resource: oval:org.mitre.oval:def:852

Name: oval:org.mitre.oval:def:852

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:852

US Government Resource: oval:org.mitre.oval:def:847

Name: oval:org.mitre.oval:def:847

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:847