CVE-1999-1024

CVE-1999-1024 describes a denial-of-service vulnerability in Tcpdump version 3.4a. Remote attackers can exploit a flaw in the ip_print procedure by sending a packet with a zero-length header, leading to an infinite loop and core dump when Tcpdump attempts to process it. This vulnerability is rated as High severity with a CVSS score of 7.5, indicating it can be exploited remotely with low complexity and no authentication, resulting in potential data confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild or Metasploit/Nuclei modules, an ExploitDB entry (EDB-19251) exists, and the CVE has garnered moderate community discussion, suggesting awareness of its exploitability.