PT-2004-1350 · Ethereal · Ethereal

Published 2004-03-25 · Updated 2024-02-14 · CVE-2004-0176

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.8.13 through 0.10.2

Description The issue is related to multiple buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service or the execution of arbitrary code. This can occur via various dissectors, including NetFlow, IGAP, EIGRP, PGM, IrDA, BGP, ISUP, and TCAP.

Recommendations For Ethereal versions 0.8.13 through 0.10.2, consider updating to a version that addresses these buffer overflows to prevent potential exploitation. As a temporary workaround, consider restricting access to the dissectors mentioned until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-0176

DSA-511

RHSA-2004:136

Affected Products

Ethereal

References · 29

• 🔥 https://exploit-db.com/exploits/167 · Exploit
• 🔥 https://exploit-db.com/exploits/170 · Exploit
• http://security.gentoo.org/glsa/glsa-200403-07.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:024 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-137.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0176 · Security Note
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-136.html · Vendor Advisory
• http://debian.org/security/2004/dsa-511 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15569 · Note
• http://kb.cert.org/vuls/id/119876 · Note
• http://kb.cert.org/vuls/id/644886 · Note
• http://kb.cert.org/vuls/id/740188 · Note
• http://security.e-matters.de/advisories/032004.html · Note
• http://kb.cert.org/vuls/id/433596 · Note