Test ID:	1.3.6.1.4.1.25623.1.0.55603
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-850-1)
Summary:	The remote host is missing an update for the Debian 'tcpdump' package(s) announced via the DSA-850-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'tcpdump' package(s) announced via the DSA-850-1 advisory. Vulnerability Insight: 'Vade 79' discovered that the BGP dissector in tcpdump, a powerful tool for network monitoring and data acquisition, does not properly handle RT_ROUTING_INFO. A specially crafted BGP packet can cause a denial of service via an infinite loop. For the old stable distribution (woody) this problem has been fixed in version 3.6.2-2.9. For the stable distribution (sarge) this problem has been fixed in version 3.8.3-4. For the unstable distribution (sid) this problem has been fixed in version 3.8.3-4. We recommend that you upgrade your tcpdump package. Affected Software/OS: 'tcpdump' package(s) on Debian 3.0. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1279 13389 http://www.securityfocus.com/bid/13389 15125 http://secunia.com/advisories/15125 17101 http://secunia.com/advisories/17101 18146 http://secunia.com/advisories/18146 20050426 tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits. http://www.securityfocus.com/archive/1/396932 DSA-850 http://www.debian.org/security/2005/dsa-850 FLSA:156139 http://www.securityfocus.com/archive/1/430292/100/0/threaded RHSA-2005:417 http://www.redhat.com/support/errata/RHSA-2005-417.html RHSA-2005:421 http://www.redhat.com/support/errata/RHSA-2005-421.html SCOSA-2005.60 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.60/SCOSA-2005.60.txt oval:org.mitre.oval:def:9601 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9601
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.