CVE-2003-0145: Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes...

Security readout for executives and security teams

CVE-2003-0145 is an old tcpdump denial-of-service issue. Sources say tcpdump before 3.7.2 could mishandle unknown RADIUS attributes and enter an infinite loop. The main business risk is disruption of packet-capture or diagnostic tooling, not confirmed data theft or system takeover. Exposure is most likely on legacy systems still running tcpdump earlier than 3.7.2, especially where tcpdump processes RADIUS-related traffic. Modern supported distributions are unlikely to be exposed, but embedded appliances, old forensic images, or unmanaged capture hosts should be checked. Handle through legacy risk management unless tcpdump before 3.7.2 is found in production. It is a denial-of-service issue in a diagnostic tool, but stale packet-capture utilities often indicate broader unmanaged system risk. Mitigation focus: Inventory tcpdump versions on servers, appliances, and diagnostic capture hosts.; Replace tcpdump versions before 3.7.2 using vendor-supported packages.; Review Red Hat, Debian, and Mandrake advisories for platform-specific fixed packages..

Prepared

Jun 30, 2026, 03:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.