CVE-2000-1026

Description

Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.

Affected products

• lbl / tcpdump3.4 – 3.4
• lbl / tcpdump3.4a6 – 3.4a6
• lbl / tcpdump3.5 – 3.5
• lbl / tcpdump3.5_alpha – 3.5_alpha

Exploits & proofs of concept

• exploit-dbtcpdump 3.4/3.5 - AFS ACL Packet Buffer Overflowby Zhodiac

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5480
• VENDOR_ADVISORYftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:61.tcpdump.v1.1.asc
• MISChttp://www.securityfocus.com/bid/1870
• MISChttp://archives.neohapsis.com/archives/linux/suse/2000-q4/0681.html