← back
CVE-2003-0108

CVE-2003-0108

EPSS 11.3%
isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/22294unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000629http://marc.info/?l=bugtraq&m=104637420104189&w=2http://marc.info/?l=bugtraq&m=104678787109030&w=2http://www.debian.org/security/2003/dsa-255http://www.idefense.com/advisory/02.27.03.txthttp://www.iss.net/security_center/static/11434.phphttp://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027http://www.novell.com/linux/security/advisories/2003_015_tcpdump.htmlhttp://www.redhat.com/support/errata/RHSA-2003-032.htmlhttp://www.redhat.com/support/errata/RHSA-2003-085.htmlhttp://www.redhat.com/support/errata/RHSA-2003-214.htmlhttp://www.securityfocus.com/bid/6974