CVE-2002-1350: High severity lbl tcpdump vulnerability
Published Dec 23, 2002
·Updated
The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).
Affected Software
1 affected component
Lbl Tcpdump<=3.6.2.2.2
Remediation
Patch Available
Patch Available
Event History
Dec 23, 2002
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1350?
CVE-2002-1350 is considered a denial of service vulnerability with moderate severity.
2
How do I fix CVE-2002-1350?
To fix CVE-2002-1350, upgrade tcpdump to version 3.7 or later.
3
Which versions of tcpdump are affected by CVE-2002-1350?
CVE-2002-1350 affects tcpdump versions up to and including 3.6.x.
4
Can CVE-2002-1350 be exploited remotely?
Yes, CVE-2002-1350 can be exploited remotely, leading to an application crash.
5
What kind of attack does CVE-2002-1350 facilitate?
CVE-2002-1350 facilitates a denial of service attack by crashing the tcpdump application.