6889 matches found
Ethereal contains multiple vulnerabilities in the EIGRP protocol dissector
Overview Ethereal contains multiple vulnerabilities in the Enhanced Interior Gateway Routing Protocol EIGRP protocol dissector. These vulnerabilities could allow a remote, unauthenticated attacker to execute arbitrary code. Description Ethereal is a network traffic analysis package. It includes t...
CVE-2003-1012
The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets...
CVE-2003-1012
CVE-2003-1012 relates to Ethereal (Wireshark predecessor). The SMB dissector in Ethereal before 0.10.0 is vulnerable to remote denial of service via a malformed SMB packet that triggers a segmentation fault during processing of selected packets. Several vendor advisories (Red Hat RHSA-2004:002, D...
CVE-2003-1012: Undefined Security Weakness
The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets...
CVE-2003-1013: NULL Pointer Dereference
The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service crash via a malformed Q.931, which triggers a null dereference...
CVE-2003-0927
Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SOCKS dissector...
CVE-2003-0927: Undefined Security Weakness
Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SOCKS dissector...
PT-2003-1953 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.15 and earlier Description: A heap-based buffer overflow issue allows remote attackers to cause a denial of service, potentially leading to a crash, and possibly execute arbitrary code. This is achieved via the SOCKS...
CVE-2003-0428
Unknown vulnerability in the DCERPC DCE/RPC dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service memory consumption via a certain NDR string...
CVE-2003-0429
The CVE-2003-0429 issue affects Ethereal (OSI dissector) versions up to 0.9.12. The vulnerability arises from invalid IPv4/IPv6 prefix lengths, which can cause a buffer overflow, enabling remote attackers to potentially crash Ethereal or execute arbitrary code. Public references indicate fixes ar...
CVE-2003-0430
The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service crash via an invalid ASN.1 value...
PT-2003-1621 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing an invalid ASN.1 value to the SPNEGO dissector. Recommendations: For Ethereal versions 0.9.12...
CVE-2003-0429: Undefined Security Weakness
The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow...
CVE-2003-0428: Undefined Security Weakness
Unknown vulnerability in the DCERPC DCE/RPC dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service memory consumption via a certain NDR string...
CVE-2003-0430: Undefined Security Weakness
The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service crash via an invalid ASN.1 value...
CVE-2003-0357: Undefined Security Weakness
Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 Mount and 2 PPP dissectors...
PT-2003-1559 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.11 and earlier Description: The issue is related to multiple integer overflow vulnerabilities. These vulnerabilities can be exploited by remote attackers to cause a denial of service and possibly execute arbitrary code...
Ethereal contains integer overflow in Mount dissector
Overview Ethereal is a network traffic analysis package. The mount packet dissector contains a vulnerability that may result in the execution of arbitrary code. Description The mount packet dissector for Ethereal contains an integer overflow vulnerability. According to the Ethereal Advisory,...
Ethereal contains integer overflow in PPP dissector
Overview Ethereal is a network traffic analysis package. The PPP packet dissector contains a vulnerability that may result in the execution of arbitrary code. Description The PPP packet dissector for Ethereal contains an integer overflow vulnerability. According to the Ethereal Advisory,...