NetSight
IP …
medium5.0Public exploit code

CVE-2005-1267

The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to caus…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.

Affected products

VendorProductAffected versions
LblTcpdump
Versions 3.4, 3.4a6, 3.5, 3.5.2, 3.5_alpha, 3.6.2
GentooLinux
All versions
MandrakesoftMandrake Linux
Versions 10.1, 10.2
RedhatFedora Core
Versions core_3.0, core_4.0
TrustixSecure Linux
Versions 2.0, 2.1, 2.2

References