CVE-2003-0927

CVE-2003-0927 refers to a heap-based buffer overflow in Ethereal (Wireshark) up to version 0.9.15, affecting the SOCKS dissector and enabling remote denial of service and possible arbitrary code execution. Connected sources also confirm related CAN entries (CVE-2003-0925/0926) and advisories from...

CVE-2003-0925

CVE-2003-0925 (and related CVEs 0926, 0927) affect Ethereal up to version 0.9.15. Multiple buffer overflow/heap overflow vulnerabilities exist in parsers (e.g., GTP MSISDN string; ISAKMP/MEGACO; SOCKS dissector; SMB, Q.931 dissectors in related entries). Root cause: remote handling of crafted pac...

CVE-2003-0927

Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SOCKS dissector...

CVE-2003-0926

CVE-2003-0926 affects Ethereal (and Tethereal) up to version 0.9.15, enabling remote attackers to crash the service via certain malformed ISAKMP or MEGACO packets. Some connected advisories (Mandrake MDKSA-2003:114 and RHSA-2003:324) indicate that Ethereal 0.9.16 (or newer) fixes this issue; upgr...

CVE-2003-0926

Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service crash via certain malformed 1 ISAKMP or 2 MEGACO packets...

PT-2003-1951 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.15 and earlier Description: A buffer overflow issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string. Recommendations: For versions 0.9.15 and...

PT-2003-1953 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.15 and earlier Description: A heap-based buffer overflow issue allows remote attackers to cause a denial of service, potentially leading to a crash, and possibly execute arbitrary code. This is achieved via the SOCKS...

CVE-2003-0430

The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service crash via an invalid ASN.1 value...

CVE-2003-0429

The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow...

CVE-2003-0431

The tvbgetnstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences...

CVE-2003-0428

Unknown vulnerability in the DCERPC DCE/RPC dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service memory consumption via a certain NDR string...

CVE-2003-0432

Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages fixing a number of remotely exploitable security issues are now available. Ethereal is a package designed for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues it may be possible to make Ethereal crash or run arbitrary co...

Moderate: Red Hat Security Advisory: : Updated Ethereal packages fix security issues

Updated Ethereal packages available to fix a number of remotely exploitable security issues Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues it may be possible to make Ethereal crash or run arbitrary code by injecting a...

[SECURITY] [DSA-324-1] New ethereal packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 324-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 18th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0432

Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...

CVE-2003-0429

The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow...

CVE-2003-0431

The tvbgetnstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences...

CVE-2003-0432

Ethereal (WinZip packet analyzer) 0.9.12 and earlier is affected by multiple string-handling weaknesses in several dissectors (BGP, WTP, DNS, 802.11, ISAKMP, WSP, CLNP, ISIS, RMI). The CVE-2003-0432 issue arises from improper handling of certain strings, contributing to potential memory consumpti...

CVE-2003-0431

The CVE-2003-0431 issue affects Ethereal up to version 0.9.12, where tvb_get_nstringz0 did not correctly handle a zero-length buffer size. This could lead to memory issues, crashes, or, per Red Hat advisories, remote-exploitation risk via crafted input. Mitigation: upgrade to Ethereal 0.9.13 or l...