1229 matches found
security flaw
Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code...
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. The MMSE dissector in Ethereal releases 0.10.1 through 0.10.3 contained a buffer overflow flaw. On a system where Ethereal is running, a remote attacker cou...
security flaw
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...
[OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2004.015 16-Apr-2004 Package: ethereal Vulnerability: arbitrary code execution OpenPK...
Ethereal: Multiple security problems
Background Ethereal is a feature rich network protocol analyzer. Description There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.4, including: A buffer overflow in the MMSE dissector. Under specific conditions a SIP packet could make Ethereal crash. The AIM dissector coul...
CVE-2004-0504
Ethereal 0.10.3 allows remote attackers to cause a denial of service crash via certain SIP messages between Hotsip servers and clients...
CVE-2004-0506
The CVE-2004-0506 entry concerns Ethereal (0.9.8–0.10.3) where the SPNEGO dissector could dereference NULL, triggering a remote crash/denial of service. The vulnerability is network-exploitable with no authentication and partial availability impact (CVSS v2 base 5.0). Affected advisories (Gentoo ...
CVE-2004-0507
CVE-2004-0507 describes a buffer overflow in Ethereal’s MMSE dissector affecting versions 0.10.1–0.10.3. The flaw allows remote code execution and denial of service. Connected advisories (GLSA 200406-01, OpenVAS/Red Hat/SUSE entries) confirm a need to update Ethereal to a newer, fixed release (up...
CVE-2004-0506
The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service crash via unknown attack vectors that cause a null pointer dereference...
CVE-2004-0505
CVE-2004-0505 affects Ethereal (Wireshark) with the AIM dissector. The advisory notes that Ethereal versions prior to the fixed release (e.g., 0.10.x up to 0.10.3) are vulnerable and can trigger an assertion error leading to a denial of service. The OpenVAS/Gentoo/GNU advisories corroborate a vul...
CVE-2004-0504
CVE-2004-0504 is a vulnerability in Ethereal where a SIP message exchange (between Hotsip servers and clients) can crash the dissector, effective in Ethereal versions prior to the 0.10.4 release. Related entries (RHSA-2004:234, Gentoo GLSA 200406-01, OpenVAS entries) indicate multiple vendors and...
CVE-2004-0507
Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2004-0505
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...
PT-2004-1620 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.8 through 0.10.3 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, via unknown attack vectors that lead to a null pointer dereference. Recommendations: For Ethereal versio...
PT-2004-1619 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.3 Description: The issue allows remote attackers to cause a denial of service via unknown attack vectors in the AIM dissector. Recommendations: For Ethereal version 0.10.3, at the moment, there is no information about a...
PT-2004-1618 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.3 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending certain SIP messages between Hotsip servers and clients. Recommendations: For Ethereal version 0.10.3,...
PT-2004-1621 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.1 through 0.10.3 Description: A buffer overflow issue exists in the MMSE dissector, which can be exploited by remote attackers to cause a denial of service and potentially execute arbitrary code. Recommendations: For...
[SECURITY] [DSA 511-1] New ethereal packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 511-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 30th, 2004 http://www.debian.org/security/faq -...
