National Cyber-Alert System

Vulnerability Summary for CVE-2004-0057

Overview

The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#174086

Name: VU#174086

Hyperlink:http://www.kb.cert.org/vuls/id/174086

External Source: BID

Name: 9423

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/bid/9423

External Source: REDHAT

Name: RHSA-2004:007

Type: Advisory; Patch Information

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-007.html

External Source: DEBIAN

Name: DSA-425

Type: Advisory; Patch Information

Hyperlink:http://www.debian.org/security/2004/dsa-425

External Source: XF

Name: tcpdump-rawprint-isakmp-dos(14837)

Hyperlink:http://xforce.iss.net/xforce/xfdb/14837

External Source: BUGTRAQ

Name: 20040119 [ESA-20040119-002] 'tcpdump' multiple vulnerabilities.

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/350238/30/21640/threaded

External Source: REDHAT

Name: RHSA-2004:008

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-008.html

External Source: MLIST

Name: [fedora-announce-list] 20040311 Re: [SECURITY] Fedora Core 1 Update: tcpdump-3.7.2-8.fc1.1

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html

External Source: FEDORA

Name: FEDORA-2004-092

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html

External Source: FEDORA

Name: FEDORA-2004-090

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html

External Source: SECUNIA

Name: 12179

Hyperlink:http://secunia.com/advisories/12179/

External Source: SECUNIA

Name: 11032

Hyperlink:http://secunia.com/advisories/11032/

External Source: SECUNIA

Name: 11022

Hyperlink:http://secunia.com/advisories/11022

External Source: SECUNIA

Name: 10718

Hyperlink:http://secunia.com/advisories/10718

External Source: SECUNIA

Name: 10668

Hyperlink:http://secunia.com/advisories/10668

External Source: SECUNIA

Name: 10652

Hyperlink:http://secunia.com/advisories/10652

External Source: SECUNIA

Name: 10644

Hyperlink:http://secunia.com/advisories/10644

External Source: SECUNIA

Name: 10639

Hyperlink:http://secunia.com/advisories/10639

External Source: SECUNIA

Name: 10636

Hyperlink:http://secunia.com/advisories/10636

External Source: MLIST

Name: [tcpdump-workers] multiple vulnerabilities in tcpdump 3.8.1

Type: Advisory

Hyperlink:http://marc.theaimsgroup.com/?l=tcpdump-workers&m=107325073018070&w=2

External Source: ENGARDE

Name: ESA-20040119-002

Hyperlink:http://lwn.net/Alerts/66805/

External Source: TRUSTIX

Name: 2004-0004

Hyperlink:http://lwn.net/Alerts/66445/

External Source: APPLE

Name: APPLE-SA-2004-02-23

Hyperlink:http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html

External Source: SGI

Name: 20040103-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc

External Source: SCO

Name: SCOSA-2004.9

Hyperlink:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt

External Source: CALDERA

Name: CSSA-2004-008.0

Hyperlink:ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt

External Source: SECTRACK

Name: 1008716

Hyperlink:http://www.securitytracker.com/id?1008716

External Source: FEDORA

Name: FLSA:1222

Hyperlink:http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html

External Source: MANDRAKE

Name: MDKSA-2004:008

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2004:008

External Source: BUGTRAQ

Name: 20040131 [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths)

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=107577418225627&w=2

External Source: SGI

Name: 20040202-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc

US Government Resource: oval:org.mitre.oval:def:854

Name: oval:org.mitre.oval:def:854

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:854

US Government Resource: oval:org.mitre.oval:def:851

Name: oval:org.mitre.oval:def:851

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:851