CVE-2005-2366

CVE-2005-2366 affects Ethereal (Ber dissector) where a wrong address calculation in the BER dissector can trigger an abort or infinite loop via crafted network traffic. Public advisories reference Ethereal versions around 0.10.11; remediation involves upgrading to a non-vulnerable release (e.g., ...

PT-2005-3281 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.11 Description: A issue in the BER dissector of Ethereal allows remote attackers to cause a denial of service, resulting in an abort or infinite loop, via unknown attack vectors. Recommendations: For Ethereal version...

FreeBSD : ethereal -- multiple protocol dissectors vulnerabilities (5d51d245-00ca-11da-bc08-0001020eed82)

An Ethreal Security Advisories reports : Our testing program has turned up several more security issues : - The LDAP dissector could free static memory and crash. - The AgentX dissector could crash. - The 802.3 dissector could go into an infinite loop. - The PER dissector could abort. - The DHCP...

CVE-2005-1459

Ethereal (now Wireshark) has multiple remote‑code-execution/denial of service vulnerabilities in its dissectors (WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, SMB PIPE) prior to version 0.10.11. The CVE set CVE-2005-1456 through CVE-2005-1470 is cited for these issues....

DEBIAN-CVE-2004-0644

The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...

CVE-2004-0644

The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...

security flaw

The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...

CVE-2001-1315

Critical Path 1 InJoin Directory Server or 2 LiveContent Directory allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1321

Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1321

Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1313

Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite...