Ethereal contains integer overflow in Mount dissector

Overview Ethereal is a network traffic analysis package. The mount packet dissector contains a vulnerability that may result in the execution of arbitrary code. Description The mount packet dissector for Ethereal contains an integer overflow vulnerability. According to the Ethereal Advisory,...

Ethereal contains integer overflow in PPP dissector

Overview Ethereal is a network traffic analysis package. The PPP packet dissector contains a vulnerability that may result in the execution of arbitrary code. Description The PPP packet dissector for Ethereal contains an integer overflow vulnerability. According to the Ethereal Advisory,...

CVE-2002-0404

Ethereal (network traffic analyzer) is affected by a memory-consumption DoS in the GIOP dissector prior to version 0.9.3. Red Hat and Debian advisories summarize the issue as a vulnerability in Ethereal’s dissectors (GIOP), where memory allocation/consumption can be exploited remotely to impact a...

CVE-2002-0401

The CVE-2002-0401 issue affects Ethereal SMB dissector: versions 0.9.3 and earlier are vulnerable to remote denial of service or arbitrary code execution due to a NULL pointer dereference when handling malformed SMB packets. Connected sources confirm the flaw and indicate remediation by upgrading...

CVE-2002-0402

CVE-2002-0402 is a vulnerability in Ethereal’s X11 dissector. The issue is a buffer overflow that can occur while Ethereal 0.9.3 and earlier parse keysyms, potentially leading to a denial of service and possibly arbitrary code execution. Public records across multiple sources identify the affecte...

CVE-2002-0404

Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service memory consumption...

CVE-2002-0402: Undefined Security Weakness

Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code while Ethereal is parsing keysyms...

CVE-2002-0404: Undefined Security Weakness

Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service memory consumption...

CVE-2002-0403: Undefined Security Weakness

DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service CPU consumption via a malformed packet that causes Ethereal to enter an infinite loop...

CVE-2002-0401: NULL Pointer Dereference

SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer...

PT-2003-1354 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.7 through 0.9.9 Description: A format string issue in the SOCKS dissector of Ethereal allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers. Recommendations: For Ethereal...

CVE-2002-1355

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service infinite loop via malformed messages...

CVE-2002-1355

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service infinite loop via malformed messages...

CVE-2002-1355

CVE-2002-1355 affects Ethereal (now Wireshark) up to version 0.9.7, specifically the BGP dissector. The vulnerability arises from multiple integer signedness errors in the BGP dissector, which allow remote attackers to trigger a denial of service via malformed messages, causing an infinite loop. ...

CVE-2002-1355: Undefined Security Weakness

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service infinite loop via malformed messages...

PT-2002-2278 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.9.7 and earlier Description: The issue is related to multiple integer signedness errors in the BGP dissector. This can be exploited by remote attackers who send malformed messages, resulting in a denial of service due to an...

security flaw

Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service memory consumption...

security flaw

Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets...

security flaw

Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code while Ethereal is parsing keysyms...

CVE-2002-0834

CVE-2002-0834 describes a buffer overflow in Ethereal’s ISIS protocol dissector affecting version 0.9.5 and earlier. It allows remote denial of service and could enable arbitrary code execution via malformed packets. The vulnerability is documented in advisories (Debian DSA-162-1; RHSA-2002:170) ...