NetSight
IP …
critical9.8Public exploit code

CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP p…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Affected products

VendorProductAffected versions
TcpdumpTcpdump
through 3.9.6
CanonicalUbuntu Linux
Versions 6.06, 6.10, 7.04
DebianDebian Linux
Versions 3.1, 4.0
SlackwareSlackware
Versions 9.0, 9.1, 10.0, 10.1, 10.2, 11.0
FreebsdFreebsd
from 5.0 before 5.5
from 6.0 before 6.1
Versions 5.5, 6.1, 6.2
AppleMac Os X
from 10.0.0 before 10.4.11
AppleMac Os X Server
from 10.0.0 before 10.4.11

Weakness classification

CWE-252

References