5661 matches found
CVE-2005-0739
The IAPP dissector packet-iapp.c for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissectpdus and pduvaltostr functions...
CVE-2005-0739
CVE-2005-0739 affects Ethereal (IAPP dissector, packet-iapp.c) from versions 0.9.1 through 0.10.9. The root cause is improper handling of string formatting in assessors for dissect_pdus and pduval_to_str, which could lead to buffer overflows. The documented impact includes potential compromise of...
PT-2005-1774 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.1 through 0.10.9 Description: The issue is related to the IAPP dissector in Ethereal, which does not properly handle string formatting. This could lead to buffer overflows, particularly when dealing with modified length...
CVE-2005-0765
Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service application crash...
PT-2005-1795 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.9 Description: A issue in the JXTA dissector of Ethereal allows remote attackers to cause a denial of service, resulting in an application crash. Recommendations: For Ethereal version 0.10.9, at the moment, there is no...
PT-2005-1739 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.9 and earlier Description: The issue is related to multiple buffer overflows in the dissect a11 radius function in the CDMA A11 3G-A11 dissector. This allows remote attackers to execute arbitrary code via RADIUS...
security flaw
Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory...
security flaw
Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service application crash...
security flaw
Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service application crash from assertion...
security flaw
Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet...
security flaw
The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service infinite loop...
security flaw
Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption."...
security flaw
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service application crash...
security flaw
The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service application crash via a certain packet that causes the dissector to access previously-freed memory...
CVE-2005-0006
CVE-2005-0006 affects Ethereal (now Wireshark) COPS dissector. Vulnerable in Ethereal 0.10.6 through 0.10.8; processing of COPS messages can trigger an infinite loop, allowing remote attackers to cause a denial of service. Connected sources indicate this is a network-based impact with partial ava...
CVE-2005-0007
Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service application crash from assertion...
CVE-2005-0084
Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet...
CVE-2005-0008
CVE-2005-0008 is an Ethereal vulnerability in the DNP dissector affecting 0.10.5–0.10.8, enabling remote attackers to trigger memory corruption. Numerous connected advisories (e.g., RHSA-2005:011, Gentoo GLSA 200501-27, OpenVAS entries) reference a security update for ethereal. No specific exploi...