OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.

From: Romain Francoise (rfrancoisedebian.org)
Date: Wed Apr 27 2005 - 15:21:42 CDT

Vade 79 <v9fakehalo.us> writes:

> the ISIS bug is in 3.8.x/3.9.1/CVS. (did not check below 3.8.x)

I don't know about 3.7 but at least tcpdump 3.6 isn't vulnerable to this
one.

> the BGP and LDP bugs seem to be only in 3.8.x. (did not check below
> 3.8.x)

The LDP one isn't in tcpdump 3.6 either (no LDP dissector) but the BGP
one is. A security update for Debian stable (tcpdump 3.6.2) is pending.

Thanks,

--
  ,''`.
 : :' : Romain Francoise <rfrancoisedebian.org>
 `. `' http://people.debian.org/~rfrancoise/
   `-