| Vulnerability Name: | CVE-2005-1278 (CCN-20288) | ||||||||||||||||||||
| Assigned: | 2005-04-26 | ||||||||||||||||||||
| Published: | 2005-04-26 | ||||||||||||||||||||
| Updated: | 2018-10-19 | ||||||||||||||||||||
| Summary: | The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet. | ||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||||||||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||||||||||||||
| Vulnerability Type: | CWE-Other | ||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||
| References: | Source: CCN Type: FreeBSD Security Advisory FreeBSD-SA-05:10.tcpdump Infinite loops in tcpdump protocol decoding Source: SCO Type: UNKNOWN SCOSA-2005.60 Source: CCN Type: SGI Security Advisory 20050502-01-U SGI Advanced Linux Environment 3 Security Update #37 Source: MITRE Type: CNA CVE-2005-1278 Source: CCN Type: Conectiva Linux Security Announcement CLSA-2005:986 Security fixes for tcpdump Source: CCN Type: RHSA-2005-417 tcpdump security update Source: CCN Type: RHSA-2005-421 tcpdump security update Source: CCN Type: SA15125 tcpdump Multiple Denial of Service Vulnerabilities Source: SECUNIA Type: UNKNOWN 15125 Source: SECUNIA Type: UNKNOWN 18146 Source: CCN Type: ASA-2006-041 Tcpdump Denial of Service (SCOSA-2005.60) Source: CCN Type: GLSA-200505-06 TCPDump: Decoding routines Denial of Service vulnerability Source: REDHAT Type: UNKNOWN RHSA-2005:417 Source: REDHAT Type: UNKNOWN RHSA-2005:421 Source: BUGTRAQ Type: UNKNOWN 20050426 tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits. Source: FEDORA Type: UNKNOWN FLSA:156139 Source: BID Type: UNKNOWN 13392 Source: CCN Type: BID-13392 tcpdump ISIS Decoding Routines Denial Of Service Vulnerability Source: CCN Type: tcpdump Web site TCPDUMP public repository Source: CCN Type: TLSA-2005-63 Tcpdump denial of service attack Source: CCN Type: USN-119-1 tcpdump vulnerabilities Source: XF Type: UNKNOWN tcpdump-isisprint-dos(20288) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:10159 Source: SUSE Type: SUSE-SR:2005:017 SUSE Security Summary Report | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration RedHat 1:  Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||