VDB
CVE-2004-0057
CVE-2004-0057
PUBLISHED
CVSS 5 MEDIUM
The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.
EPSS 5.27% · 92.5th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
5.27%
92.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| lbl | tcpdump | 0 |
Timeline
- Jan 15, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
References
- oval:org.mitre.oval:def:11197 vdb
- CSSA-2004-008.0 vendor-advisory
- 11022 third-party-advisory
- 10636 third-party-advisory
- tcpdump-rawprint-isakmp-dos(14837) vdb
- ESA-20040119-002 vendor-advisory
- 20040103-01-U vendor-advisory
- 20040202-01-U vendor-advisory
- 20040119 [ESA-20040119-002] 'tcpdump' multiple vulnerabilities. mailing-list
- 10652 third-party-advisory
- 10639 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-0057 advisory
- http://lwn.net/Alerts/66445 url
- http://lwn.net/Alerts/66805 url
- http://secunia.com/advisories/10718 url
- http://secunia.com/advisories/11032 url
- http://secunia.com/advisories/12179 url
- http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html url
- http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html url
- http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html url
…and 19 more