ID CVE-1999-1024
Summary ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.
References
Vulnerable Configurations
  • cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*
    cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 18-10-2016 - 02:00)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 313
bugtraq
  • 19990616 tcpdump 3.4 bug?
  • 19990617 Re: tcpdump 3.4 bug?
  • 19990620 Re: tcpdump 3.4 bug? (final)
Last major update 18-10-2016 - 02:00
Published 28-11-2001 - 05:00
Last modified 18-10-2016 - 02:00
Back to Top