CVE-2007-3798

Published: Jul 16, 2007Modified: Apr 23, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Affected (49)

Products: Tcpdump: Tcpdump · Canonical: Ubuntu Linux · Debian: Debian Linux · +3 more

Show all products

Tcpdump: Tcpdump · Canonical: Ubuntu Linux · Debian: Debian Linux · Slackware: Slackware · Freebsd: Freebsd · Apple: Mac Os X, Mac Os X Server

1 product

1 product

1 product

1 product

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tcpdump Tcpdump	Up to 3.9.6

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration D

7 vulnerable

Vulnerable Software	Affected Versions
Slackware Slackware	Version 10.0
Slackware Slackware	Version 10.1
Slackware Slackware	Version 10.2
Slackware Slackware	Version 11.0
Slackware Slackware	Version 12.0
Slackware Slackware	Version 9.0
Slackware Slackware	Version 9.1

Configuration E

34 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	From 5.0 to 5.5
Freebsd Freebsd	From 6.0 to 6.1
Freebsd Freebsd	Version 5.5
Freebsd Freebsd	Version 5.5 p11
Freebsd Freebsd	Version 5.5 p12
Freebsd Freebsd	Version 5.5 p13
Freebsd Freebsd	Version 5.5 p14
Freebsd Freebsd	Version 5.5 p1
Freebsd Freebsd	Version 5.5 p2
Freebsd Freebsd	Version 5.5 p3
Freebsd Freebsd	Version 5.5 p4
Freebsd Freebsd	Version 5.5 p5
Freebsd Freebsd	Version 5.5 p7
Freebsd Freebsd	Version 5.5 p8
Freebsd Freebsd	Version 5.5 p9
Freebsd Freebsd	Version 6.1
Freebsd Freebsd	Version 6.1 p10
Freebsd Freebsd	Version 6.1 p11
Freebsd Freebsd	Version 6.1 p12
Freebsd Freebsd	Version 6.1 p13
Freebsd Freebsd	Version 6.1 p16
Freebsd Freebsd	Version 6.1 p17
Freebsd Freebsd	Version 6.1 p18
Freebsd Freebsd	Version 6.1 p1
Freebsd Freebsd	Version 6.1 p2
Freebsd Freebsd	Version 6.1 p4
Freebsd Freebsd	Version 6.1 p6
Freebsd Freebsd	Version 6.1 p7
Freebsd Freebsd	Version 6.1 p9
Freebsd Freebsd	Version 6.2
Freebsd Freebsd	Version 6.2 p1
Freebsd Freebsd	Version 6.2 p4
Freebsd Freebsd	Version 6.2 p5
Freebsd Freebsd	Version 6.2 p6

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	From 10.0.0 to 10.4.11
Apple Mac Os X Server	From 10.0.0 to 10.4.11

Related CWEs

CWE-252

Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

References (70)

http://bugs.gentoo.org/show_bug.cgi?id=184815

Source: cve@mitre.org

Third Party Advisory

http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11&r2=1.91.2.12

Source: cve@mitre.org

Broken Link

http://docs.info.apple.com/article.html?artnum=307179

Source: cve@mitre.org

Broken Link

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

Source: cve@mitre.org

Mailing List

http://secunia.com/advisories/26135

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26168

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26223

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26231

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26263

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26266

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26286

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26395

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26404

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26521

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/27580

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/28136

Source: cve@mitre.org

Broken LinkVendor Advisory

http://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200707-14.xml

Source: cve@mitre.org

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449313

Source: cve@mitre.org

Mailing ListPatch

http://www.debian.org/security/2007/dsa-1353

Source: cve@mitre.org

Third Party Advisory

http://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c

Source: cve@mitre.org

Exploit

http://www.mandriva.com/security/advisories?name=MDKSA-2007:148

Source: cve@mitre.org

Third Party Advisory

http://www.novell.com/linux/security/advisories/2007_16_sr.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0368.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0387.html

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.securityfocus.com/archive/1/474225/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/24965

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018434

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.trustix.org/errata/2007/0023/

Source: cve@mitre.org

Broken Link

http://www.turbolinux.com/security/2007/TLSA-2007-46.txt

Source: cve@mitre.org

Broken Link

http://www.ubuntu.com/usn/usn-492-1

Source: cve@mitre.org

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

Source: cve@mitre.org

Broken LinkThird Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2007/2578

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.vupen.com/english/advisories/2007/4238

Source: cve@mitre.org

Broken LinkVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771

Source: cve@mitre.org

Broken Link

http://bugs.gentoo.org/show_bug.cgi?id=184815