TCPDump Malformed ISAKMP Packet Denial Of Service Vulnerability Solution:
SuSE has released an advisory (SuSE-SA:2004:002), which contains fixes to address this issue. Further information about obtaining and applying fixes can be found in the advisory.
Conectiva have released an advisory (CLA-2003:629). Information about obtaining and applying fixes are available in the referenced advisory.
OpenPKG have released an advisory (OpenPKG-SA-2003.014). Information about obtaining and applying fixes are available in the referenced advisory.
MandrakeSoft has released an advisory. Information about obtaining and applying fixes are available in the referenced advisory.
Gentoo Linux has released an advisory. Users who have installed net-analyzer/tcpdump are advised to upgrade to tcpdump-3.7.2 by issuing the following commands:
emerge sync
emerge -u tcpdump
emerge clean
SuSE has released an advisory (SuSE-SA:2003:0015) which contains fixes. Further information about obtaining and applying fixes can be found in the advisory.
Red Hat has released a security advisory (RHSA-2003:032-01) that contains fixes addressing this and other tcpdump issues. Users are advised to upgrade as soon as possible.
OpenPKG has released an advisory OpenPKG-SA-2004.002 to address this and other issues. Please see the referenced advisory for more information.
The following fixes are available:
LBL tcpdump 3.5.2
LBL tcpdump 3.6.2
LBL tcpdump 3.7
LBL tcpdump 3.7.1
S.u.S.E. Linux 8.0
S.u.S.E. Linux 8.1
S.u.S.E. Linux Personal 8.2
S.u.S.E. Linux Personal 9.0
S.u.S.E. Linux Personal 9.0 x86_64
