local privilege escalation in ethereal

2003-03-2112:54:01

lists.opensuse.org

0.047 Low

EPSS

Percentile

91.7%

JSON

Ethereal is a GUI for analyzing and displaying network traffic. Ethereal is vulnerable to a format string bug in it’s SOCKS code and to a heap buffer overflow in it’s NTLMSSP code. These bugs can be abused to crash ethereal or maybe to execute arbitrary code on the machine running ethereal.

OSVersionArchitecturePackageVersionFilename
openSUSE7.1ppcethereal< 0.9.6-92ethereal-0.9.6-92.ppc.rpm
openSUSE7.2i386ethereal< 0.9.6-155ethereal-0.9.6-155.i386.rpm
openSUSE7.3ppcethereal< 0.9.6-90ethereal-0.9.6-90.ppc.rpm
openSUSE8.1i586ethereal< 0.9.6-152ethereal-0.9.6-152.i586.rpm
openSUSE7.3i386ethereal< 0.9.6-154ethereal-0.9.6-154.i386.rpm
openSUSE7.1alphaethereal< 0.9.6-80ethereal-0.9.6-80.alpha.rpm
openSUSE7.3sparcethereal< 0.9.6-57ethereal-0.9.6-57.sparc.rpm
openSUSE7.1i386ethereal< 0.9.6-156ethereal-0.9.6-156.i386.rpm
openSUSE8.0i386ethereal< 0.9.6-153ethereal-0.9.6-153.i386.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	7.1	ppc	ethereal	< 0.9.6-92	ethereal-0.9.6-92.ppc.rpm
openSUSE	7.2	i386	ethereal	< 0.9.6-155	ethereal-0.9.6-155.i386.rpm
openSUSE	7.3	ppc	ethereal	< 0.9.6-90	ethereal-0.9.6-90.ppc.rpm
openSUSE	8.1	i586	ethereal	< 0.9.6-152	ethereal-0.9.6-152.i586.rpm
openSUSE	7.3	i386	ethereal	< 0.9.6-154	ethereal-0.9.6-154.i386.rpm
openSUSE	7.1	alpha	ethereal	< 0.9.6-80	ethereal-0.9.6-80.alpha.rpm
openSUSE	7.3	sparc	ethereal	< 0.9.6-57	ethereal-0.9.6-57.sparc.rpm
openSUSE	7.1	i386	ethereal	< 0.9.6-156	ethereal-0.9.6-156.i386.rpm
openSUSE	8.0	i386	ethereal	< 0.9.6-153	ethereal-0.9.6-153.i386.rpm

0.047 Low

EPSS

Percentile

91.7%

JSON

Related for SUSE-SA:2003:019