Security Advisory (MDKSA-2004:030): tcpdump

[aru]

MandrakeSoft Security Advisory MDKSA-2004:030 : tcpdump

 

April 14th, 2004

Updated tcpdump packages fix several vulnerabilities

 

A number of vulnerabilities were discovered in tcpdump versions prior to 3.8.1 that, if fed a maliciously crafted packet, could be exploited to crash tcpdump. These vulnerabilities include:

 

Remote attackers can cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read. (CAN-2004-1083)

 

Integer underflow in the isakmp_id_print allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read. (CAN-2004-0184)

 

The updated packages are patched to correct these problems.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 9.1
  
• 9.2
  
• 9.2/AMD64
  
• Multi Network Firewall 8.2
  
• Corporate Server 2.1
  
• 10.0
  

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:030

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2004-0183

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2004-0184

 

Posted automatically by aru (mdksec2mub v0.0.8)