lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20031220195218.GJ19209@skywalker.bsws.de>
Date: Sat, 20 Dec 2003 20:52:18 +0100
From: Henning Brauer <hb-bugtraq@...s.de>
To: bugtraq@...urityfocus.com
Subject: Re: Remote crash in tcpdump from OpenBSD


On Sat, Dec 20, 2003 at 05:25:22PM +0100, Przemyslaw Frasunek wrote:
> >Description:
> 	Sending a packet containg 0xff,0x02 bytes to port 1701/udp causes
> 	a L2TP protocol parser in tcpdump to enter an infinite loop, eating
> 	all available memory and then segfaulting.
> 
> 	This bug also affects tcpdump in -CURRENT.
> >How-To-Repeat:
> 	tcpdump -i lo0 -n udp and dst port 1701 &
> 	perl -e 'print "\xff\x02"' | nc -u localhost 1701

several developers including me cannot reproduce that on -current.

-- 
Henning Brauer, BS Web Services, http://bsws.de
hb@...s.de - henning@...nbsd.org
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ