Redhat Security Update Fixes Tcpdump Denial of Service Issue

[Brad]

* Technical Description *

Redhat has released a security patch to correct a vulnerability identified in Tcpdump. This flaw resides in the "bgp_update_print()" function (print-bgp.c) that does not properly handle specially crafted BGP packets, which may be exploited by a remote attacker to cause the application to crash. For additional information, see : FrSIRT/ADV-2005-0713

 * Affected Products *

Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 4)

 * Solution *

Use Red Hat Network to download and update your packages :
http://rhn.redhat.com/

 * References *

http://www.frsirt.com/english/advisories/2005/0756
http://rhn.redhat.com/errata/RHSA-2005-505.html