NetSight
IP …
medium5.0Public exploit code

CVE-2000-0333

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to it…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.

Affected products

VendorProductAffected versions
Ethereal GroupEthereal
Versions 0.8.4, 0.8.5, 0.8.6
LblTcpdump
Versions 3.4, 3.5a

References