PT-2005-4059 · Ethereal+1 · Ethereal+1

Publicado 2005-10-25 · Atualizado 2024-02-14 · CVE-2005-3245

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.10.3 through 0.10.12

Description The issue is related to an unspecified vulnerability in the ONC RPC dissector. When the "Dissect unknown RPC program numbers" option is enabled, it allows remote attackers to cause a denial of service due to memory consumption.

Recommendations For Ethereal versions 0.10.3 through 0.10.12, consider disabling the "Dissect unknown RPC program numbers" option as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3245

RHSA-2005:809

RHSA-2005_809

Produtos afetados

Ethereal

Red Hat

Referências · 27

• https://redhat.com/security/data/cve/CVE-2005-3243.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3245 · Nota de Segurança
• http://osvdb.org/20129 · Nota
• https://redhat.com/security/data/cve/CVE-2005-3248.html · Nota
• http://securitytracker.com/id?1015082 · Nota
• http://redhat.com/support/errata/RHSA-2005-809.html · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-3245.html · Nota
• http://secunia.com/advisories/17254 · Nota
• http://secunia.com/advisories/17286 · Nota
• http://secunia.com/advisories/17480 · Nota
• https://redhat.com/security/data/cve/CVE-2005-3247.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11060 · Nota
• http://redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-3241.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-3184.html · Nota