[ILUG] tcpdump security bug

[Nick Murtagh]

On Friday 12 April 2002 18:13, John P. Looney wrote:
>  http://lwn.net/alerts/RedHat/RHSA-2001%3A089-08.php3
>
>  Anyone know what this means ? They are a little terse with the "what can
> happen" type information.

Well the one down as "remote root exploit" is described here:

  http://archives.neohapsis.com/archives/bugtraq/2001-06/0163.html

It says 

  "Intrusion detection using tcpdump would no longer be useful due to the
   attack stoping all network activity on the system."