Test ID:	1.3.6.1.4.1.25623.1.0.53856
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 206-1 (tcpdump)
Summary:	The remote host is missing an update to tcpdump;announced via advisory DSA 206-1.
Description:	Summary: The remote host is missing an update to tcpdump announced via advisory DSA 206-1. Vulnerability Insight: The BGP decoding routines for tcpdump used incorrect bounds checking when copying data. This could be abused by introducing malicious traffic on a sniffed network for a denial of service attack against tcpdump, or possibly even remote code execution. This has been fixed in version 3.6.2-2.2. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1350 BugTraq ID: 6213 http://www.securityfocus.com/bid/6213 Bugtraq: 20021219 TSLSA-2002-0084 - tcpdump (Google Search) http://marc.info/?l=bugtraq&m=104032975103398&w=2 Caldera Security Advisory: CSSA-2002-050.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-050.0.txt Debian Security Information: DSA-206 (Google Search) http://www.debian.org/security/2002/dsa-206 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027 http://www.tcpdump.org/lists/workers/2001/10/msg00101.html http://www.redhat.com/support/errata/RHSA-2003-032.html http://www.redhat.com/support/errata/RHSA-2003-033.html http://www.redhat.com/support/errata/RHSA-2003-214.html XForce ISS Database: tcpdump-sizeof-memory-corruption(10695) https://exchange.xforce.ibmcloud.com/vulnerabilities/10695
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.