National Cyber-Alert System

Vulnerability Summary for CVE-2004-0055

Overview

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#955526

Name: VU#955526

Type: Advisory

Hyperlink:http://www.kb.cert.org/vuls/id/955526

External Source: BID

Name: 7090

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/bid/7090

External Source: REDHAT

Name: RHSA-2004:008

Type: Advisory; Patch Information

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-008.html

External Source: MLIST

Name: [fedora-announce-list] 20040311 Re: [SECURITY] Fedora Core 1 Update: tcpdump-3.7.2-8.fc1.1

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html

External Source: FEDORA

Name: FEDORA-2004-092

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html

External Source: FEDORA

Name: FEDORA-2004-090

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html

External Source: DEBIAN

Name: DSA-425

Hyperlink:http://www.debian.org/security/2004/dsa-425

External Source: SECUNIA

Name: 12179

Hyperlink:http://secunia.com/advisories/12179/

External Source: SECUNIA

Name: 11032

Hyperlink:http://secunia.com/advisories/11032/

External Source: SECUNIA

Name: 11022

Hyperlink:http://secunia.com/advisories/11022

External Source: SECUNIA

Name: 10718

Hyperlink:http://secunia.com/advisories/10718

External Source: SECUNIA

Name: 10652

Hyperlink:http://secunia.com/advisories/10652

External Source: SECUNIA

Name: 10644

Hyperlink:http://secunia.com/advisories/10644

External Source: SECUNIA

Name: 10639

Hyperlink:http://secunia.com/advisories/10639

External Source: SECUNIA

Name: 10636

Hyperlink:http://secunia.com/advisories/10636

External Source: TRUSTIX

Name: 2004-0004

Hyperlink:http://lwn.net/Alerts/66445/

External Source: APPLE

Name: APPLE-SA-2004-02-23

Hyperlink:http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html

External Source: SGI

Name: 20040103-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc

External Source: SCO

Name: SCOSA-2004.9

Hyperlink:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt

External Source: CALDERA

Name: CSSA-2004-008.0

Hyperlink:ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt

External Source: SECTRACK

Name: 1008735

Hyperlink:http://www.securitytracker.com/id?1008735

External Source: FEDORA

Name: FLSA:1222

Hyperlink:http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html

External Source: MANDRAKE

Name: MDKSA-2004:008

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2004:008

External Source: MLIST

Name: [tcpdump-workers] multiple vulnerabilities in tcpdump 3.8.1

Hyperlink:http://marc.theaimsgroup.com/?l=tcpdump-workers&m=107325073018070&w=2

External Source: BUGTRAQ

Name: 20040131 [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths)

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=107577418225627&w=2

External Source: CONECTIVA

Name: CLSA-2003:832

Hyperlink:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000832

External Source: SGI

Name: 20040202-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc

US Government Resource: oval:org.mitre.oval:def:853

Name: oval:org.mitre.oval:def:853

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:853

US Government Resource: oval:org.mitre.oval:def:850

Name: oval:org.mitre.oval:def:850

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:850