CVE-2000-0333

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: May 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03342.1The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorize CVE-2000-03357.5The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.CVE-2000-03362.1Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-03377.2Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.CVE-2000-03385.5Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service CVE-2000-03397.5ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rule CVE-2000-03407.2Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.CVE-2000-03415.0ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.CVE-2000-03427.5Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file t CVE-2000-034310.0Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FR CVE-2000-03445.0The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.CVE-2000-03452.1The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via th