Signature Detail
Short Name |
IKE:DOS:TCPDUMP-SPI-OVERFLOW |
|---|---|
Severity |
High |
Recommended |
No |
Category |
IKE |
Release Date |
2004/05/05 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IKE: ISAKMP Tcpdump Delete Payload Overflow
This protocol anomaly is an ISKMP packet with a delete payload that specifies more SPIs than the packet can contain. This can cause a denial-of-service (DoS) in TCPdump ISAKMP parsing routines.
Extended Description
tcpdump is prone to a remotely exploitable buffer overrun vulnerability. This issue exists in tcpdump's ISAKMP packet display functions. This issue affects how ISAKMP Delete payloads are handled. This may cause a denial of service or potentially be leveraged to execute arbitrary code.
Affected Products
- LBL tcpdump 3.4.0
- LBL tcpdump 3.4.0 a6
- LBL tcpdump 3.5.0
- LBL tcpdump 3.5.0 alpha
- LBL tcpdump 3.5.2
- LBL tcpdump 3.6.2
- LBL tcpdump 3.6.3
- LBL tcpdump 3.7.0
- LBL tcpdump 3.7.1
- LBL tcpdump 3.7.2
- LBL tcpdump 3.8.1
- Red Hat Linux 7.3.0
- Red Hat Linux 9.0.0 I386
- SGI ProPack 2.4.0
- SGI ProPack 3.0.0
References
- BugTraq: 10003
- CVE: CVE-2004-0183
- URL: http://www.rapid7.com/advisories/R7-0017.html