Description
Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.
References
- MDKSA-2002:032 vendor-advisory
- VU#797201 third-party-advisory
- RHSA-2001:089 vendor-advisory
- tcpdump-afs-rpc-bo(7006) vdb-entry
- 3065 vdb-entry
- CLA-2002:480 vendor-advisory