Date: Fri, 7 Mar 2003 08:52:15 +0200 From: Giorgos Keramidas <keramida@ceid.upatras.gr> To: twig les <twigles@yahoo.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: TCPDump version in base? Message-ID: <20030307065215.GB684@gothmog.gr> In-Reply-To: <20030306234952.51661.qmail@web10106.mail.yahoo.com> References: <20030307122620.L59121@a2.scoop.co.nz> <20030306234952.51661.qmail@web10106.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Please, pretty please, do *NOT* top-post, trim your quotes and keep the original poster's name when editing the quoted text. On 2003-03-06 15:49, twig les <twigles@yahoo.com> wrote: >Andrew McNaughton wrote: >>On Thu, 6 Mar 2003, twig les wrote: >>> Hey all, maybe I'm missing something but I can't seem to find >>> the version of tcpdump that I'm running. After searching the >>> massive man page and doing a quick "pkg_info | grep tcpdump" to >>> make sure no info was available before posting, I don't know if >>> I'm vulnerable. Does anyone know how to glean the version >>> number from tcpdump? [...] >>> >>> Tcpdump versions prior to 3.7.2 contain a denial of service in >>> the decoding of ISAKMP packets. [...] >>> This vulnerability is confirmed and fixed in version 3.7.2, >>> available from: http://www.tcpdump.org/ >> >> Since tcpdump has moved into the freebsd core distribution >> it's doubtful >> whether the tcpdump version number as such is all that >> meaningful anyway. > > This is a good point. Do I have to upgrade? The team hasn't > put out an advisory but we actively use a few FreeBSD boxes for > sniffing so pardon my impatience. You can always find out the version of the installed tcpdump and libpcap by running: % tcpdump -V The first two lines should tell you what you want to know. The 3.7.2 fixes were imported to FreeBSD -STABLE on March 3 by Bill Fenner. If you CVSup and rebuild your system from sources after that date you'll be set to go. - Giorgos To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030307065215.GB684>