CVE:CVE-2005-1267
CNNVD:CNNVD-200506-099
tcpdump 3.x中的bgp_update_print函数存在安全漏洞，由于没有正确处理decode_prefix4函数的-1返回值，远程攻击者可借助一个特制的BGP包来触发拒绝服务攻击(无限循环)。
solution:Upgrade lbl tcpdump to a higher version than 3.4,3.4a6,3.5,3.5.2,3.5_alpha,3.6.2,3.6.3,3.7,3.7.1,3.7.2,3.8.1,3.8.2,3.8.3,3.9,3.9.1,and avoid the version 3.4,3.4a6,3.5,3.5.2,3.5_alpha,3.6.2,3.6.3,3.7,3.7.1,3.7.2,3.8.1,3.8.2,3.8.3,3.9,3.9.1; Upgrade gentoo linux to a higher version than *; Upgrade mandrakesoft mandrake_linux to a higher version than 10.1,10.2,and avoid the version 10.1,10.2; Upgrade redhat fedora_core to a higher version than core_3.0,core_4.0,and avoid the version core_3.0,core_4.0; Upgrade trustix secure_linux to a higher version than 2.0,2.1,2.2,and avoid the version 2.0,2.1,2.2