CVE

Id
8612  
CVE No.
CVE-2004-0184  
Status
Candidate  
Description
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.  
Phase
Assigned (20040302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
53796 8612 CVE-2004-0184 BUGTRAQ:20040330 R7-0017: TCPDUMP ISAKMP payload handling denial-of-service vulnerabilities  View
53797 8612 CVE-2004-0184 URL:http://marc.info/?l=bugtraq&m=108067265931525&w=2  View
53798 8612 CVE-2004-0184 MISC:http://www.rapid7.com/advisories/R7-0017.html  View
53799 8612 CVE-2004-0184 CONFIRM:http://www.tcpdump.org/tcpdump-changes.txt  View
53800 8612 CVE-2004-0184 DEBIAN:DSA-478  View
53801 8612 CVE-2004-0184 URL:http://www.debian.org/security/2004/dsa-478  View
53802 8612 CVE-2004-0184 FEDORA:FEDORA-2004-1468  View
53803 8612 CVE-2004-0184 URL:https://bugzilla.fedora.us/show_bug.cgi?id=1468  View
53804 8612 CVE-2004-0184 REDHAT:RHSA-2004:219  View
53805 8612 CVE-2004-0184 URL:http://www.redhat.com/support/errata/RHSA-2004-219.html  View
53806 8612 CVE-2004-0184 TRUSTIX:2004-0015  View
53807 8612 CVE-2004-0184 URL:http://www.trustix.org/errata/2004/0015  View
53808 8612 CVE-2004-0184 CERT-VN:VU#492558  View
53809 8612 CVE-2004-0184 URL:http://www.kb.cert.org/vuls/id/492558  View
53810 8612 CVE-2004-0184 BID:10004  View
53811 8612 CVE-2004-0184 URL:http://www.securityfocus.com/bid/10004  View
53812 8612 CVE-2004-0184 OVAL:oval:org.mitre.oval:def:976  View
53813 8612 CVE-2004-0184 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:976  View
53814 8612 CVE-2004-0184 OVAL:oval:org.mitre.oval:def:9581  View
53815 8612 CVE-2004-0184 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9581  View
53816 8612 CVE-2004-0184 SECTRACK:1009593  View
53817 8612 CVE-2004-0184 URL:http://securitytracker.com/id?1009593  View
53818 8612 CVE-2004-0184 SECUNIA:11258  View
53819 8612 CVE-2004-0184 URL:http://secunia.com/advisories/11258  View
53820 8612 CVE-2004-0184 XF:tcpdump-isakmp-integer-underflow(15679)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63594 JVNDB-2003-000320 WU-FTPD の S/Key 認証におけるバッファオーバーフローの脆弱性 S/Key 認証を有効にしている WU-FTPD には、skey_challenge() 関数内でユーザ名を取り扱う変数に対するチェックが不適切であるため、異常に長いログインユーザ名を含む認証用情報を送りつけることで、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0185 8612 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000320.html  View