FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump

Affected packages
	tcpdump	<	3.8.1_351
	FreeBSD	<	5.2.1

Details

VuXML ID	96ba2dae-4ab0-11d8-96f2-0020ed76ef5a
Discovery	2003-12-24
Entry	2004-01-19

Jonathan Heusser discovered vulnerabilities in tcpdump's L2TP, ISAKMP, and RADIUS protocol handlers. These vulnerabilities may be used by an attacker to crash a running `tcpdump' process.

References

CVE Name	CVE-2003-0989
CVE Name	CVE-2003-1029
CVE Name	CVE-2004-0057
Message	http://marc.theaimsgroup.com/?l=tcpdump-workers&m=107325073018070&w=2
Message	http://www.tcpdump.org/lists/workers/2003/12/msg00083.html