tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/1165 | Exploit Patch Vendor Advisory |
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000@paranoia.pgci.ca | Exploit Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 1999-05-30 21:00
Updated : 2008-09-10 12:04
NVD link : CVE-2000-0333
Mitre link : CVE-2000-0333
JSON object : View
CWE
Products Affected
ethereal_group
- ethereal
lbl
- tcpdump