OSVDB ID: 32427

Title: tcpdump 802.11 parse_elements() Function Off-By-One

Info

Disclosure
Mar 01, 2007

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 Tcpdump contains a flaw that may allow a remote denial of service. The issue is triggered due to a off-by-one heap overflow in the 'parse_elements()' function. By sending a malformed 802.11 frame, a remote attacker could cause a denial of service resulting in a loss of availability.

Classification

 Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Solution

 Upgrade to version CVS-Current or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Tcpdump

tcpdump

 3.9.5
3.9.4
3.9.3
3.9.2
3.9.1
3.9.0

References

Credit
  • Moritz Jodeit - moritzjodeit.org - http://www.jodeit.org/


Direct URL: http://osvdb.org/32427