FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1279

This CVE name corresponds to:

Entered	Topic
2005-06-18	tcpdump -- infinite loops in protocol decoding

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1279 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1279
Phase	Assigned(20050426)

Description

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.

References

Source	Reference
BUGTRAQ	20050426 tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.
DEBIAN	DSA-850
FEDORA	FLSA:156139
REDHAT	RHSA-2005:417
REDHAT	RHSA-2005:421
SCO	SCOSA-2005.60
BID	13389
OVAL	oval:org.mitre.oval:def:9601
SECUNIA	18146
SECUNIA	15125
SECUNIA	17101