CVE-2000-0333

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ethereal_group:ethereal:0.8.4:*:*:*:*:*:*:*
cpe:2.3:a:ethereal_group:ethereal:0.8.5:*:*:*:*:*:*:*
cpe:2.3:a:ethereal_group:ethereal:0.8.6:*:*:*:*:*:*:*
cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*
cpe:2.3:a:lbl:tcpdump:3.5a:*:*:*:*:*:*:*

History

07 Nov 2023, 01:55

Type Values Removed Values Added
References
  • {'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000@paranoia.pgci.ca', 'name': '20000502 Denial of service attack against tcpdump', 'tags': ['Exploit', 'Vendor Advisory'], 'refsource': 'BUGTRAQ'}
  • () http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000%40paranoia.pgci.ca -

Information

Published : 1999-05-31 04:00

Updated : 2023-12-10 10:17


NVD link : CVE-2000-0333

Mitre link : CVE-2000-0333

CVE.ORG link : CVE-2000-0333


JSON object : View

Products Affected

lbl

  • tcpdump

ethereal_group

  • ethereal