| View previous topic :: View next topic |
| Author |
Message |
pjp
Administrator
Joined: 16 Apr 2002
Posts: 15989
Location: Colorado
|
 Posted: Wed Mar 05, 2003 1:45 pm Post subject: [gentoo-security] GLSA: tcpdump |
 |
|
| Daniel Ahlberg wrote: | - - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200303-5
- - ---------------------------------------------------------------------
PACKAGE : tcpdump
SUMMARY : remote dos
DATE : 2003-03-05 10:19 UTC
EXPLOIT : remote
VERSIONS AFFECTED : <3.7.2
FIXED VERSION : =>3.7.2
CVE : CAN-2003-0108
- - ---------------------------------------------------------------------
- From advisory:
"A vulnerability exists in the parsing of ISAKMP packets (UDP port 500)
that allows an attacker to force TCPDUMP into an infinite loop upon
receipt of a specially crafted packet."
Read the full advisory at:
http://www.idefense.com/advisory/02.27.03.txt
SOLUTION
It is recommended that all Gentoo Linux users who are running
net-analyzer/tcpdump upgrade to tcpdump-3.7.2 as follows:
emerge sync
emerge -u tcpdump
emerge clean
- - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at http://cvs.gentoo.org/~aliz
- - --------------------------------------------------------------------- |
Mailing List Archive: Unavailable
_________________
Safety is my gaol.
US Constitution | Amendments |
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
News & Announcements
