5661 matches found
CVE-2005-0084
CVE-2005-0084 describes a buffer overflow in Ethereal's X11 dissector affecting versions 0.8.10 through 0.10.8. The overflow allows remote attackers to execute arbitrary code via a crafted packet. The vulnerability has a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity,...
CVE-2005-0006
The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service infinite loop...
PT-2005-1145 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.5 through 0.10.8 Description: The issue is related to a problem in the DNP dissector, which can be exploited by remote attackers to cause memory corruption. Recommendations: For Ethereal versions 0.10.5 through 0.10.8, ...
PT-2005-1143 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.6 through 0.10.8 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, due to a problem in the COPS dissector. Recommendations: For versions 0.10.6 through 0.10.8,...
PT-2005-1146 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.6 through 0.10.8 Description: The issue is related to an unknown vulnerability in the Gnutella dissector, which allows remote attackers to cause a denial of service, resulting in an application crash. Recommendations: F...
PT-2005-1144 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.6 through 0.10.8 Description: The issue is related to an unknown vulnerability in the DLSw dissector, which allows remote attackers to cause a denial of service, resulting in an application crash due to an assertion...
PT-2005-1193 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.10 through 0.10.8 Description: A buffer overflow issue exists in the X11 dissector, allowing remote attackers to execute arbitrary code via a crafted packet. Recommendations: For Ethereal versions 0.8.10 through 0.10.8,...
DSA-653-1 ethereal - buffer overflow
Bulletin has no description...
CVE-2004-1139
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service application crash...
CVE-2004-1139
CVE-2004-1139 corresponds to an unknown vulnerability in Ethereal’s DICOM dissector that affects version 0.10.4 through 0.10.7 and can be exploited remotely to crash the application, causing a denial of service. The connected advisories reference multiple vendor/security pages (Red Hat, Gentoo GL...
CVE-2004-1141
CVE-2004-1141 affects Ethereal (Wireshark) HTTP dissector versions 0.10.1–0.10.7. Remote attacker could crash the application by sending crafted packets that trigger a use-after-free in the dissector. No details on affected platforms or fixes are provided in the documents; remediation status is n...
Mandrake Linux Security Advisory : ethereal (MDKSA-2004:152)
A number of vulnerabilities were discovered in Ethereal : - Matthew Bing discovered a bug in DICOM dissection that could make Ethereal crash CVE-2004-1139 - An invalid RTP timestamp could make Ethereal hang and create a large temporary file, possibly filling available disk space CVE-2004-1140 - T...
CVE-2004-1139
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service application crash...
PT-2004-2104 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.4 through 0.10.7 Description: The issue is related to an unknown vulnerability in the DICOM dissector, which allows remote attackers to cause a denial of service, resulting in an application crash. Recommendations: For...
CVE-2004-0635
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service process crash via a 1 malformed or 2 missing community string, which causes an out-of-bounds read...
Ethereal fails to properly handle malformed iSNS packets
Overview Ethereal contains a vulnerability in the way it processes Internet Storage Name Service iSNS packets. Description The Internet Storage Name Service iSNS protocol is used to automate the discovery, management, and configuration of iSCSI and Fibre Channel devices in an IP network. Ethereal...
CVE-2003-0081
CVE-2003-0081 affects Ethereal (packet analyzer) with a format string vulnerability in the SOCKS dissector, impacting Ethereal 0.8.7–0.9.9. Remote attackers could execute arbitrary code by sending crafted SOCKS packets. Debian, Red Hat, Mandrake/Mandriva, SUSE and other advisories reference this ...
CVE-2003-0081
Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers...
GLSA-200406-01 : Ethereal: Multiple security problems
The remote host is affected by the vulnerability described in GLSA-200406-01 Ethereal: Multiple security problems There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.4, including: A buffer overflow in the MMSE dissector. Under specific conditions a SIP packet could make...