CVE-2005-1453

Leafnode's CVE-2005-1453 affects fetchnews in versions 1.9.48 to 1.11.1. A remote NNTP server closing the connection while fetchnews is reading either an article header or article body can cause fetchnews to crash, which in turn prevents fetching from other servers in the configured list. This is...

CVE-2005-1470

The connected advisories RHSA-2005:427 and CESA-2005:427 document a set of Ethereal vulnerabilities (CVE-2005-1456 through CVE-2005-1470) across multiple dissectors. They mandate upgrading Ethereal to version 0.10.11 to mitigate the issues. Related OpenVAS/Nessus entries reference these advisorie...

CVE-2005-1468

CVE-2005-1468 affects Ethereal (before 0.10.11) where multiple dissectors (including WSP, Q.931, H.245, KINK, MGCP, RPC, SMBMailslot, SMB NETLOGON, and others) may crash the analyzer via crafted network traffic, causing a denial of service due to a null dereference. Multiple advisories (RHSA-2005...

CVE-2005-1460

CVE-2005-1460 affects Ethereal (and tethereal) prior to 0.10.11. Descriptions in connected sources indicate multiple unknown dissectors can be exploited remotely to trigger an assertion error, causing a denial of service. Public details consistently cite upgrade to version 0.10.11 as the remediat...

CVE-2005-1458

CVE-2005-1458 affects Ethereal (wireshark) KINK dissector in versions before 0.10.11; the initial description notes unknown impact/attack vectors. Red Hat/CentOS advisories confirm a fixed release: upgrade to Ethereal 0.10.11 to mitigate these issues. The exact exploitation details beyond the fix...

CVE-2005-1464

CVE-2005-1464 is listed among multiple vulnerabilities in Ethereal up to version 0.10.11 that allow a remote attacker to cause a denial of service (infinite loop). The connected advisories confirm Ethereal upgrades to version 0.10.11 as a remediation. The exact root cause per-CVE isn’t detailed i...

CVE-2005-1461

The CVE‑2005‑1461 case concerns Ethereal (predecessor to Wireshark) with multiple buffer‑overflow flaws across dissectors (SIP, X.509, and others) that allow remote attackers to crash Ethereal and potentially execute arbitrary code. Red Hat/CentOS advisories (RHSA-2005:427, CESA-2005:427) and rel...

CVE-2005-1467

CVE-2005-1467 concerns an unknown vulnerability in the NDPS dissector of Ethereal before 0.10.11 that could allow a remote attacker to cause a denial of service by exhausting memory via unknown vectors. The echoing connected sources corroborate that Ethereal (tethereal) before 0.10.11 is affected...

CVE-2005-0918

The issue concerns the NPSVG3.dll ActiveX control used by Adobe SVG Viewer (versions 3.02 and earlier) on Internet Explorer. The vulnerability allows remote attackers to infer the existence of arbitrary files by setting the control’s src property to a target filename and observing whether the pag...

CVE-2005-1463

CVE-2005-1463 refers to multiple format-string vulnerabilities in Ethereal before 0.10.11, affecting the DHCP and ANSI A dissectors. The root cause is format-string handling that allows remote attackers to execute arbitrary code. The advisory notes that upgrading Ethereal to version 0.10.11 elimi...

CVE-2005-1462

Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code...

CVE-2005-1462

The CVE-2005-1462 entry concerns Ethereal (now Wireshark) before version 0.10.11, specifically a double-free vulnerability in the ICEP dissection code that could allow a remote attacker to execute arbitrary code. The issue affects the Ethereal/tethereal dissectors and relates to how the ICEP diss...

CVE-2005-1469

The CVE-2005-1469 entry concerns Ethereal (Wireshark) GSM dissector before version 0.10.11. The vulnerability is described as an unknown issue in the GSM dissector that can cause the dissector to access an invalid pointer, potentially impacting parsing of GSM traffic. Supported details indicate t...

CVE-2005-1457

CVE-2005-1457 involves multiple vulnerabilities in Ethereal prior to version 0.10.11, specifically in the dissectors for AIM, LDAP, FibreChannel, GSM_MAP, SRVLOC, and NTLMSSP. The issues allow remote attackers to cause a denial of service (crash). The typical impact is a network-remote crash, wit...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

CVE-2005-1469

Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer...

CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...

CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...

CVE-2005-1465

CVE-2005-1465 refers to an unknown vulnerability in Ethereal’s NCP dissector that could allow remote attackers to trigger a denial of service via a long loop. The connected advisories confirm that Ethereal releases prior to 0.10.11 were affected, and updates shipping version 0.10.11 fix the issue...

CVE-2005-1456

CVE-2005-1456 affects Ethereal before 0.10.11, with multiple vulnerabilities in the DHCP and Telnet dissectors that allow remote denial of service (abort). The initial description notes DoS via malformed packets, while connected documents confirm the issue is addressed in Ethereal 0.10.11 (RHSA-2...