RHEL 2.1 / 3 : ethereal (RHSA-2005:011)

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. A number of security flaws have been discovered in Ethereal. On a system where Ethereal is running, a remote attacker could send malicious packets to trigge...

CVE-2005-0084

Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2005-0010

Technical details about CVE-2005-0010 are not publicly available in the provided connected documents; monitor for updates.

CVE-2005-0008

CVE-2005-0008 is an Ethereal vulnerability in the DNP dissector affecting 0.10.5–0.10.8, enabling remote attackers to trigger memory corruption. Numerous connected advisories (e.g., RHSA-2005:011, Gentoo GLSA 200501-27, OpenVAS entries) reference a security update for ethereal. No specific exploi...

CVE-2005-0006

The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service infinite loop...

CVE-2005-0010

Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory...

CVE-2005-0007

Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service application crash from assertion...

CVE-2005-0009

Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service application crash...

CVE-2005-0084

CVE-2005-0084 describes a buffer overflow in Ethereal's X11 dissector affecting versions 0.8.10 through 0.10.8. The overflow allows remote attackers to execute arbitrary code via a crafted packet. The vulnerability has a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity,...

CVE-2005-0007

The CVE-2005-0007 entry concerns Ethereal (Wireshark) versions 0.10.6 through 0.10.8, specifically the DLSw dissector. A remote attacker could trigger an assertion and cause an application crash (DoS). Public references note that security updates/patches were released for Ethereal, and multiple O...

CVE-2005-0008

Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption."...

CVE-2005-0006

CVE-2005-0006 affects Ethereal (now Wireshark) COPS dissector. Vulnerable in Ethereal 0.10.6 through 0.10.8; processing of COPS messages can trigger an infinite loop, allowing remote attackers to cause a denial of service. Connected sources indicate this is a network-based impact with partial ava...

CVE-2005-0009

CVE-2005-0009 is a vulnerability in Ethereal’s Gnutella dissector (affecting Ethereal 0.10.6–0.10.8) that enables a remote attacker to cause a denial of service (application crash). The connected security advisories reference Ethereal security updates and patches (e.g., Red Hat, Gentoo GLSA, SuSE...

PT-2005-1145 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.5 through 0.10.8 Description: The issue is related to a problem in the DNP dissector, which can be exploited by remote attackers to cause memory corruption. Recommendations: For Ethereal versions 0.10.5 through 0.10.8, ...

PT-2005-1193 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.10 through 0.10.8 Description: A buffer overflow issue exists in the X11 dissector, allowing remote attackers to execute arbitrary code via a crafted packet. Recommendations: For Ethereal versions 0.8.10 through 0.10.8,...

PT-2005-1144 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.6 through 0.10.8 Description: The issue is related to an unknown vulnerability in the DLSw dissector, which allows remote attackers to cause a denial of service, resulting in an application crash due to an assertion...

PT-2005-1146 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.6 through 0.10.8 Description: The issue is related to an unknown vulnerability in the Gnutella dissector, which allows remote attackers to cause a denial of service, resulting in an application crash. Recommendations: F...

PT-2005-1143 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.6 through 0.10.8 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, due to a problem in the COPS dissector. Recommendations: For versions 0.10.6 through 0.10.8,...

Debian DSA-653-1 : ethereal - buffer overflow

A buffer overflow has been detected in the X11 dissector of ethereal, a commonly used network traffic analyser. A remote attacker may be able to overflow a buffer using a specially crafted IP packet. More problems have been discovered which don't apply to the version in woody but are fixed in sid...

Mandrake Linux Security Advisory : ethereal (MDKSA-2005:013)

"A number of vulnerabilities were found in Ethereal, all of which are fixed in version 0.10.9: The COPS dissector could go into an infinite loop CVE-2005-0006 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake...