PT-2005-2457 · Ethereal+1 · Ethereal+1

Publicado 2005-05-05 · Atualizado 2024-02-14 · CVE-2005-1461

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11

Description: The issue is related to multiple buffer overflows in various protocol dissectors in Ethereal, including SIP, CMIP, CMP, CMS, CRMF, ESS, OCSP, X.509, ISIS, DISTCC, FCELS, Q.931, NCP, TCAP, ISUP, MEGACO, PKIX1Explicit, PKIX Qualified, and Presentation. This could allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Recommendations: For Ethereal versions prior to 0.10.11, update to version 0.10.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable protocol dissectors until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-1461

RHSA-2005:427

RHSA-2005_427

Produtos afetados

Ethereal

Red Hat

Referências · 25

• 🔥 https://exploit-db.com/exploits/1021 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1461 · Nota de Segurança
• https://redhat.com/security/data/cve/CVE-2005-1462.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9853 · Nota
• https://redhat.com/security/data/cve/CVE-2005-1461.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1466.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1465.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1457.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1458.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1470.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1467.html · Nota
• http://ethereal.com/news/item_20050504_01.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1459.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1469.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1463.html · Nota