Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities

// source: https://www.securityfocus.com/bid/10672/info Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a SNMP protocol dissector vulnerability. These issues are due to a failure...

Fedora Core 2 : ethereal-0.10.5-0.2.1 (2004-220)

Issues have been discovered in the following protocol dissectors : - The iSNS dissector could make Ethereal abort in some cases. 0.10.3 - 0.10.4 CVE-2004-0633 - SMB SID snooping could crash if there was no policy name for a handle. 0.9.15 - 0.10.4 CVE-2004-0634 - The SNMP dissector could crash du...

CVE-2004-0633

The CVE-2004-0633 issue affects Ethereal’s iSNS dissector (versions 0.10.3–0.10.4). A remote, unauthenticated attacker could cause a crash or potentially execute code by sending malformed iSNS packets, per included reports. Impact is a denial of service (partial availability) and possible code ex...

CVE-2004-0633

The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service process abort via an integer overflow...

CVE-2004-0633: Undefined Security Weakness

The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service process abort via an integer overflow...

PT-2004-1725 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.3 through 0.10.4 Description: The issue allows remote attackers to cause a denial of service, resulting in a process abort, via an integer overflow in the iSNS dissector. Recommendations: For Ethereal versions 0.10.3...

CVE-2001-0751: Undefined Security Weakness

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers ISN, which allows remote attackers to spoof or hijack TCP connections...

CVE-2001-0288

CVE-2001-0288 pertains to Cisco IOS devices (notably switches/routers running IOS 12.1 and earlier) where TCP Initial Sequence Numbers (ISNs) are predictable. The ISN predictability enables remote attackers to spoof or hijack TCP connections, with impact described as partial confidentiality, inte...

PT-2010-5656 · Linux +1 · Iscsitarget +1

Name of the Vulnerable Software and Affected Versions: iscsitarget versions prior to 1.4.19 iscsitarget versions 0.4.16 and earlier Linux SCSI target framework versions 1.0.3, 0.9.5, and earlier Description: The issue involves multiple vulnerabilities in the iscsitarget package that can lead to a...