CVE-2003-0108

NONE EPSS 95.5%
Published Mar 7, 200323y ago · Modified Jun 16, 20262w ago
Find Similar
Published Mar 7, 2003 23y ago
Last Modified Jun 16, 2026 2w ago

Description

isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.

Threat Intelligence

EPSS Exploit Probability
95.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 4

VendorProductVersionRange
lbltcpdump3.5.2any
lbltcpdump3.6.2any
lbltcpdump3.7any
lbltcpdump3.7.1any

References 12

  • distro.conectiva.com.br http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000629
  • marc.info http://marc.info/?l=bugtraq&m=104637420104189&w=2
  • marc.info http://marc.info/?l=bugtraq&m=104678787109030&w=2
  • debian.org http://www.debian.org/security/2003/dsa-255
    PatchVendor Advisory
  • idefense.com http://www.idefense.com/advisory/02.27.03.txt
    PatchVendor Advisory
  • iss.net http://www.iss.net/security_center/static/11434.php
    Vendor Advisory
  • mandrakesoft.com http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027
  • novell.com http://www.novell.com/linux/security/advisories/2003_015_tcpdump.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2003-032.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2003-085.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2003-214.html
  • securityfocus.com http://www.securityfocus.com/bid/6974
    PatchVendor Advisory

Remediation

  • debian.org http://www.debian.org/security/2003/dsa-255
    PatchVendor Advisory
  • idefense.com http://www.idefense.com/advisory/02.27.03.txt
    PatchVendor Advisory
  • securityfocus.com http://www.securityfocus.com/bid/6974
    PatchVendor Advisory