CVE-2003-1029 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2003-1029
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-1029

Description: The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.

CVE Status: Candidate

References: ST 1008748 MLIST http://marc.theaimsgroup.com/?l=tcpdump-workers&m=107228187124962&w=2 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2004:008 DEBIAN http://www.debian.org/security/2004/dsa-425 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=107213553214985&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=107193841728533&w=2

Return to the previous page.