CVE-2004-0057
lbl tcpdump: no CVSS score yet. EPSS 5.3% chance of exploitation in the next 30 days.
The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.
- EPSS
- 5.3% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lbl:tcpdump
References
- ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt
- ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc
- ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc
- http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html