Signature Detail
Short Name |
IKE:DOS:TCPDUMP-ID-UNDERFLOW |
|---|---|
Severity |
High |
Recommended |
No |
Category |
IKE |
Release Date |
2004/05/05 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IKE: Tcpdump Identification Payload Underflow
This protocol anomaly is an ISAKMP packet with a malformed Identification payload length. A self reported payload length that is less than 8 and greater than 4 causes tcpdump to crash as it attempts to read beyond the buffer.
Extended Description
tcpdump is prone to a denial of service vulnerability due to an integer underflow. This issue exists in tcpdump's ISAKMP packet display functions. This issue affects how ISAKMP Identification payloads are handled. This may cause a denial of service.
Affected Products
- Apple Mac OS X 10.2.8
- Apple Mac OS X 10.3.4
- Apple Mac OS X 10.3.5
- Apple Mac OS X Server 10.2.8
- Apple Mac OS X Server 10.3.4
- Apple Mac OS X Server 10.3.5
- LBL tcpdump 3.4.0
- LBL tcpdump 3.4.0 a6
- LBL tcpdump 3.5.0
- LBL tcpdump 3.5.0 alpha
- LBL tcpdump 3.5.2
- LBL tcpdump 3.6.2
- LBL tcpdump 3.6.3
- LBL tcpdump 3.7.0
- LBL tcpdump 3.7.1
- LBL tcpdump 3.7.2
- LBL tcpdump 3.8.1
- Red Hat Linux 7.3.0
- Red Hat Linux 9.0.0 I386
- SGI ProPack 2.4.0
- SGI ProPack 3.0.0
References
- BugTraq: 10004
- BugTraq: 10003
- CVE: CVE-2004-0184
- CVE: CVE-2004-0183