TCPDump畸形RADIUS数据包拒绝服务漏洞-一一网

漏洞信息详情

TCPDump畸形RADIUS数据包拒绝服务漏洞

CNNVD编号：CNNVD-200402-081

危害等级：中危
CVE编号：
CVE-2004-0055
漏洞类型：

设计错误
发布时间：

2004-02-17
威胁类型：

远程
更新时间：

2009-02-06
厂商：

lbl
漏洞来源：
‘);”>The discovery of t…

漏洞简介

tcpdump 3.8.1以及之前版本中print-radius.c的print_attr_string函数存在漏洞。远程攻击者可以借助一个具有超大长度变量的RADIUS属性导致服务拒绝（分割错误）。

漏洞公告

Red Hat has released an advisory for Fedora (FEDORA-2004-090). This advisory contains fixes to address several vulnerabilities in tcpdump. Fedora users may use the up2date utility to obtain and apply appropriate fixes; alternatively users may apply fixes (linked below) manually. See referenced advisory for further details.
Apple has released Security Update 2004-02-23 and fixes to address this issue. See referenced advisory for further details.
Guardian Digital Security has released a security advisory for EnGarde Secure Linux (ESA-20030430-014). The referenced advisory contains information pertaining to obtaining and applying fixes that address this and other issues. Users are advised to upgrade as soon as possible.
Red Hat has released a security advisory (RHSA-2003:032-01) that contains fixes addressing this and other tcpdump issues. Users are advised to upgrade as soon as possible.
OpenPKG has released an advisory OpenPKG-SA-2004.002 to address this and other issues. Please see the referenced advisory for more information.
Mandrake has released advisory MDKSA-2004:008 to address this issue. Please see the referenced advisory for more information.
SGI has released an advisory 20040103-01-U with fixes to address this and other issues. Please see the referenced advisory for more information.
Fedora Legacy (FLSA:1222) has released an advisory including updates for various Red Hat releases. Please see the referenced advisory for more details on obtaining and applying fixes.
SGI has released an advisory 20040202-01-U to address this and other issues in SGI ProPack 2.4. Please see the referenced advisory for more information.
SCO has released advisory CSSA-2004-008.0 to address this issue.
RedHat has released an advisory FEDORA-2004-091 to address this and other issues in Fedora. Please see the referenced advisory for more information.
Conectiva has released an advisory CLSA-2004:832 to address this and other issues in tcpdump. Please see the advisory in web references for more information.
SCO has released advisory SCOSA-2004.9 to address this and other issues in tcpdump. Please see the referenced advisory for further information on obtaining fixes.
Fixes are available below:
RedHat Fedora Core1

Fedora arpwatch-2.1a11-7.fc1.1.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386
/arpwatch-2.1a11-7.fc1.1.i386.rpm
Fedora libpcap-0.7.2-7.fc1.1.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386
/libpcap-0.7.2-7.fc1.1.i386.rpm
Fedora tcpdump-3.7.2-7.fc1.1.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386
/tcpdump-3.7.2-7.fc1.1.i386.rpm
Fedora tcpdump-debuginfo-3.7.2-7.fc1.1.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386
/debug/tcpdump-debuginfo-3.7.2-7.fc1.1.i386.rpm

Apple Mac OS X 10.2.8

Apple SecUpd2004-02-23Jag.dmg

http://www.info.apple.com/kbnum/n120277

Apple Mac OS X Server 10.2.8

Apple SecUpdSrvr2004-02-23Jag.dmg

http://www.info.apple.com/kbnum/n120322

Apple Mac OS X 10.3.2

Apple SecUpd2004-02-23Pan.dmg

http://www.info.apple.com/kbnum/n120323

Apple Mac OS X Server 10.3.2

Apple SecUpdSrvr2004-02-23Pan.dmg

http://www.info.apple.com/kbnum/n120324

SGI ProPack 2.3

SGI patch10043.tar.gz
ftp://patches.sgi.com/support/free/security/patches/ProPack/2.3/

SGI ProPack 2.4

SGI patch10044.tar.gz
ftp://patches.sgi.com/support/free/security/patches/ProPack/2.4/patch1
0044.tar.gz

LBL tcpdump 3.6.2

Debian tcpdump_3.6.2-2.4_alpha.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_alpha.deb
Debian tcpdump_3.6.2-2.4_arm.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_arm.deb
Debian tcpdump_3.6.2-2.4_hppa.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_hppa.deb
Debian tcpdump_3.6.2-2.4_i386.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_i386.deb
Debian tcpdump_3.6.2-2.4_ia64.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_ia64.deb
Debian tcpdump_3.6.2-2.4_m68k.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_m68k.deb
Debian tcpdump_3.6.2-2.4_mips.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_mips.deb
Debian tcpdump_3.6.2-2.4_mipsel.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_mipsel.deb
Debian tcpdump_3.6.2-2.4_powerpc.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_powerpc.deb
Debian tcpdump_3.6.2-2.4_s390.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_s390.deb
Debian tcpdump_3.6.2-2.4_sparc.deb

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.4_sparc.deb
Debian tcpdump_3.6.2-2.7_alpha.debDebian GNU/Linux 3.0 (woody)

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.7_alpha.deb
Debian tcpdump_3.6.2-2.7_arm.debDebian GNU/Linux 3.0 (woody)

http://security.debian.org/pool/updates/main/t/tcpdump/tcpdump_3.6.2-2
.7_arm.deb
Debi

参考网址

来源:US-CERT Vulnerability Note: VU#955526
名称: VU#955526
链接:http://www.kb.cert.org/vuls/id/955526

来源: BID
名称: 7090
链接:http://www.securityfocus.com/bid/7090

来源: REDHAT
名称: RHSA-2004:008
链接:http://www.redhat.com/support/errata/RHSA-2004-008.html

来源: MLIST
名称: [fedora-announce-list] 20040311 Re: [SECURITY] Fedora Core 1 Update: tcpdump-3.7.2-8.fc1.1
链接:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html

来源: FEDORA
名称: FEDORA-2004-092
链接:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html

来源: FEDORA
名称: FEDORA-2004-090
链接:http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html

来源: DEBIAN
名称: DSA-425
链接:http://www.debian.org/security/2004/dsa-425

来源: SECUNIA
名称: 12179
链接:http://secunia.com/advisories/12179/

来源: SECUNIA
名称: 11032
链接:http://secunia.com/advisories/11032/

来源: SECUNIA
名称: 11022
链接:http://secunia.com/advisories/11022

来源: SECUNIA
名称: 10718
链接:http://secunia.com/advisories/10718

来源: SECUNIA
名称: 10652
链接:http://secunia.com/advisories/10652

来源: SECUNIA
名称: 10644
链接:http://secunia.com/advisories/10644

来源: SECUNIA
名称: 10639
链接:http://secunia.com/advisories/10639

来源: SECUNIA
名称: 10636
链接:http://secunia.com/advisories/10636

来源: OVAL
名称: oval:org.mitre.oval:def:9989
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9989

来源: TRUSTIX
名称: 2004-0004
链接:http://lwn.net/Alerts/66445/

来源: APPLE
名称: APPLE-SA-2004-02-23
链接:http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html

来源: SGI
名称: 20040103-01-U
链接:ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc

来源: SCO
名称: SCOSA-2004.9
链接:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt

来源: CALDERA
名称: CSSA-2004-008.0
链接:ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt

来源: SECTRACK
名称: 1008735
链接:http://www.securitytracker.com/id?1008735

来源: FEDORA
名称: FLSA:1222
链接:http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html

来源: MANDRAKE
名称: MDKSA-2004:008
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2004:008

来源: MLIST
名称: [tcpdump-workers] multiple vulnerabilities in tcpdump 3.8.1
链接:http://marc.theaimsgroup.com/?l=tcpdump-workers&m=107325073018070&w=2

来源: BUGTRAQ
名称: 20040131 [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=107577418225627&w=2

来源: CONECTIVA
名称: CLSA-2003:832
链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000832

来源: SGI
名称: 20040202-01-U
链接:ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc

来源: US Government Resource: oval:org.mitre.oval:def:853
名称: oval:org.mitre.oval:def:853
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:853

来源: US Government Resource: oval:org.mitre.oval:def:850
名称: oval:org.mitre.oval:def:850
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:850