CVE-2003-1029

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.

Date published : 2004-01-15

http://marc.info/?l=bugtraq&m=107193841728533&w=2

http://marc.info/?l=bugtraq&m=107213553214985&w=2