CVE-2004-0506

The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service crash via unknown attack vectors that cause a null pointer dereference...

Fedora Core 2 : ethereal-0.10.3-2.1 (2004-153)

Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...

Fedora Core 1 : ethereal-0.10.3-0.1.1 (2004-152)

Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...

security flaw

The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service crash via unknown attack vectors that cause a null pointer dereference...

CVE-2004-0506

The CVE-2004-0506 entry concerns Ethereal (0.9.8–0.10.3) where the SPNEGO dissector could dereference NULL, triggering a remote crash/denial of service. The vulnerability is network-exploitable with no authentication and partial availability impact (CVSS v2 base 5.0). Affected advisories (Gentoo ...

CVE-2004-0506

The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service crash via unknown attack vectors that cause a null pointer dereference...

CVE-2004-0506: Undefined Security Weakness

The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service crash via unknown attack vectors that cause a null pointer dereference...

CVE-2004-0119

CVE-2004-0119 describes a remote code execution and potential denial-of-service vulnerability in the Negotiate Security Support Provider (SSP) interface used by SPNEGO authentication in Windows 2000, Windows XP, and Windows Server 2003. The flaw is a buffer overrun in processing authentication pr...

PT-2004-1310 · Microsoft · Windows 2000 +2

Name of the Vulnerable Software and Affected Versions: Windows 2000 Windows XP Windows Server 2003 Description: The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection. This can be...

CVE-2004-0119: NULL Pointer Dereference

The Negotiate Security Software Provider SSP interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service crash from null dereference or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selectio...

[Full-Disclosure] NSFOCUS SA2004-01 : DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Topic: DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding Release Date: 2004-04-14 CVE CAN ID: CAN-2004-0119 http://www.nsfocus.com/english/homepage/research/0401.htm Affected Software and Systems: =================== - - Microsoft Window...

CVE-2003-0430

The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service crash via an invalid ASN.1 value...

CVE-2003-0430

CVE-2003-0430 concerns Ethereal (Wireshark) 0.9.12 and earlier, where the SPNEGO dissector is vulnerable to processing an invalid ASN.1 value. This can allow remote attackers to cause a denial of service (crash). The affected component is the SPNEGO dissector within Ethereal’s protocol analyzer. ...

PT-2003-1621 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing an invalid ASN.1 value to the SPNEGO dissector. Recommendations: For Ethereal versions 0.9.12...

CVE-2003-0430: Undefined Security Weakness

The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service crash via an invalid ASN.1 value...