CVE-2005-1279
Last modified
CVE-2005-1279 is a vulnerability of currently unknown severity. tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.. EPSS estimates a 18.72% chance of exploitation in the next 30 days.
Description
tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Lbl | Tcpdump | <= 3.8.3 |
References
- http://www.securityfocus.com/archive/1/396932Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/396932Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-1279?
How severe is CVE-2005-1279?
How do I fix CVE-2005-1279?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-1271Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2005-1272Stack-based buffer overflow in the Backup Agent for Microsof…
- CVE-2005-1274Stack-based buffer overflow in the getIfHeader function in t…
- CVE-2005-1275Heap-based buffer overflow in the ReadPNMImage function in p…
- CVE-2005-1277Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2005-1278The isis_print function, as called by isoclns_print, in tcpd…
- CVE-2005-1280The rsvp_print function in tcpdump 3.9.1 and earlier allows …
- CVE-2005-1281Ethereal 0.10.10 and earlier allows remote attackers to caus…
- CVE-2005-1282Multiple cross-site scripting (XSS) vulnerabilities in Argos…
- CVE-2005-1283Multiple directory traversal vulnerabilities in Argosoft Mai…
- CVE-2005-1284The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows…
- CVE-2005-1285Cross-site scripting (XSS) vulnerability in thread.php in Wo…
Are you affected by CVE-2005-1279?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST