CVE-2003-0093

The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*
cpe:2.3:a:lbl:tcpdump:3.4a6:*:*:*:*:*:*:*
cpe:2.3:a:lbl:tcpdump:3.5:*:*:*:*:*:*:*
cpe:2.3:a:lbl:tcpdump:3.5.2:*:*:*:*:*:*:*
cpe:2.3:a:lbl:tcpdump:3.6.2:*:*:*:*:*:*:*

History

20 Nov 2024, 23:43

Type Values Removed Values Added
References () http://www.debian.org/security/2003/dsa-261 - () http://www.debian.org/security/2003/dsa-261 -
References () http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027 - () http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027 -
References () http://www.redhat.com/support/errata/RHSA-2003-032.html - () http://www.redhat.com/support/errata/RHSA-2003-032.html -
References () http://www.redhat.com/support/errata/RHSA-2003-033.html - () http://www.redhat.com/support/errata/RHSA-2003-033.html -
References () http://www.redhat.com/support/errata/RHSA-2003-214.html - () http://www.redhat.com/support/errata/RHSA-2003-214.html -
References () https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=81585 - Exploit, Vendor Advisory () https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=81585 - Exploit, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/11324 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/11324 -

Information

Published : 2003-03-03 05:00

Updated : 2024-11-20 23:43


NVD link : CVE-2003-0093

Mitre link : CVE-2003-0093

CVE.ORG link : CVE-2003-0093


JSON object : View

Products Affected

lbl

  • tcpdump