USN-119-1: tcpdump vulnerabilities

Releases

• Ubuntu 5.04
• Ubuntu 4.10

Details

It was discovered that certain invalid GRE, LDP, BGP, and RSVP packets
triggered infinite loops in tcpdump, which caused tcpdump to stop
working. This could be abused by a remote attacker to bypass tcpdump
analysis of network traffic.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 5.04

• tcpdump -

Ubuntu 4.10

• tcpdump -

In general, a standard system update will make all the necessary changes.

References

• CVE-2005-1278
• CVE-2005-1279
• CVE-2005-1280