Tcpdump L2TP Parser Remote Denial of Service Vulnerability

Solution:
It has been reported that tcpdump versions 3.7.1 are not vulnerable to this issue. Users are advised to update to the non-vulnerable versions.

OpenPKG has released an advisory OpenPKG-SA-2004.002 to address this and other issues. Please see the referenced advisory for more information.

Guardian Digital has release advisory ESA-20040119-002 to address this issue. Affected users are recommended use of the Guardian Digital Secure Network to update vulnerable systems.

Mandrake has released advisory MDKSA-2004:008 to address this issue. Please see the referenced advisory for more information.

Conectiva has released an advisory CLSA-2004:832 to address this and other issues in tcpdump. Please see the advisory in web references for more information.


LBL tcpdump 3.4

LBL tcpdump 3.6.2

LBL tcpdump 3.7.2


 

Privacy Statement
Copyright 2010, SecurityFocus