PT-2004-1350 · Ethereal · Ethereal

CVE-2004-0176 · Publicado 2004-03-25 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.8.13 through 0.10.2

Description The issue is related to multiple buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service or the execution of arbitrary code. This can occur via various dissectors, including NetFlow, IGAP, EIGRP, PGM, IrDA, BGP, ISUP, and TCAP.

Recommendations For Ethereal versions 0.8.13 through 0.10.2, consider updating to a version that addresses these buffer overflows to prevent potential exploitation. As a temporary workaround, consider restricting access to the dissectors mentioned until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-0176

DSA-511

RHSA-2004:136

Produtos afetados

Ethereal

Referências · 29

• 🔥 https://exploit-db.com/exploits/167 · Exploit
• 🔥 https://exploit-db.com/exploits/170 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15569 · Nota
• http://kb.cert.org/vuls/id/119876 · Nota
• http://kb.cert.org/vuls/id/644886 · Nota
• http://security.gentoo.org/glsa/glsa-200403-07.xml · Aviso do Fabricante
• http://kb.cert.org/vuls/id/740188 · Nota
• http://security.e-matters.de/advisories/032004.html · Nota
• http://kb.cert.org/vuls/id/433596 · Nota
• http://marc.info/?l=bugtraq&m=108213710306260&w=2 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2004:024 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2004-137.html · Aviso do Fabricante
• http://kb.cert.org/vuls/id/864884 · Nota
• http://kb.cert.org/vuls/id/591820 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A878 · Nota