tcpdump Buffer Overflow and DoS Vulnerabilities (CAN-2004-0057/CAN-2003-0989/CAN-2003-1029)

Critical Vulnerability Information Vulnerability ID: ESA-20040119-002 Affected Software: tcpdump Release Date: January 19, 2004 Vulnerability Overview Multiple Buffer Overflows: Multiple buffer overflow vulnerabilities were discovered in tcpdump. By sending specially crafted packets, an attacker can cause tcpdump to crash or execute arbitrary code with the privileges of the user running tcpdump. Vulnerability Details CAN-2004-0057: The function in improperly decodes ISAKMP packets, allowing a malicious remote attacker to trigger a denial of service (crash) by sending malicious ISAKMP packets that result in invalid "len" or "loc" values being used. CAN-2003-0989: Versions of tcpdump prior to 3.8.1 allow remote attackers to cause a denial of service via infinite loops using specific ISAKMP packets. CAN-2003-1029: The L2TP protocol parser in tcpdump versions prior to 3.8.1 allows attackers to trigger infinite loops and memory consumption by sending packets with invalid data to UDP port 1701, resulting in a denial of service. Affected Products EnGarde Secure Community v1.0.1 EnGarde Secure Community 2 EnGarde Secure Professional v1.1 EnGarde Secure Professional v1.2 EnGarde Secure Professional v1.5 Remediation Automatic Updates: Guardian Digital Secure Network subscribers can automatically update affected systems. Manual Updates: Updated packages for tcpdump and libpcap are available, along with their MD5 checksums. Reference Links Guardian Digital Public Key: http://ftp.engardelinux.org/pub/engarde/ENGARDE-GPG-KEY TCPDUMP Official Website: http://www.tcpdump.org/ Guardian Digital Advisories: http://infocenter.guardiandigital.com/advisories/

Goal Reached Thanks to every supporter — we hit 100%!

tcpdump Buffer Overflow and DoS Vulnerabilities (CAN-2004-0057/CAN-2003-0989/CAN-2003-1029)