Bugtraq: Re: Denial of service attack against tcpdump

[gerald () ZING ORG (Gerald Combs)]

On Tue, 2 May 2000 bretonh () PARANOIA PGCI CA wrote:

> Greetings.
>
> There is a way to disable tcpdump running on a remote host.  By sending a
> carefully crafted UDP packet on the network which tcpdump monitors, it is
> possible, under certain circonstances, to make tcpdump fall into an infinite
> loop.
A fix for this is in the current tcpdump CVS tree at www.tcpdump.org, but
it doesn't appear to be in the 3.5 alpha release.  This has also been
fixed in the latest version of Ethereal (0.8.7).