FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1280

This CVE name corresponds to:

Entered	Topic
2005-06-18	tcpdump -- infinite loops in protocol decoding

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1280 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1280
Phase	Assigned(20050426)

Description

The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.

References

Source	Reference
BUGTRAQ	20050426 tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS.
FEDORA	FLSA:156139
REDHAT	RHSA-2005:417
REDHAT	RHSA-2005:421
SCO	SCOSA-2005.60
BID	13390
OVAL	oval:org.mitre.oval:def:10732
SECUNIA	18146
SECUNIA	15125