Rapid7 Vulnerability & Exploit Database

RHSA-2003:174: Updated tcpdump packages fix privilege dropping error

Free InsightVM Trial No credit card necessary
Watch Demo See how it all works
Back to Search

RHSA-2003:174: Updated tcpdump packages fix privilege dropping error

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
06/09/2003
Created
07/25/2018
Added
10/28/2005
Modified
07/04/2017

Description

Updated tcpdump packages that correctly drop privileges on startup are now available.

Tcpdump is a command-line tool for monitoring network traffic. The Red Hat tcpdump packages advertise that by default tcpdump will drop permissions to user 'pcap'. Due to a compilation error this did not happen, and tcpdump would run as root unless the '-U' flag was specified. Users of tcpdump are advised to upgrade to these errata packages, which contain are compiled so that by default tcpdump will drop privileges to the 'pcap' user.

Solution(s)

  • redhat-upgrade-tcpdump

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;