PT-2005-1774 · Ethereal+1 · Ethereal+1

Leon Juranic · Published 2005-03-13 · Updated 2024-02-14 · CVE-2005-0739

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.9.1 through 0.10.9

Description The issue is related to the IAPP dissector in Ethereal, which does not properly handle string formatting. This could lead to buffer overflows, particularly when dealing with modified length values that are not correctly processed by the dissect pdus and pduval to str functions.

Recommendations For Ethereal versions 0.9.1 through 0.10.9, consider restricting the use of the IAPP dissector until a fix is available. As a temporary workaround, avoid using the dissect pdus and pduval to str functions in the IAPP dissector to minimize the risk of buffer overflows.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2005-0739

DSA-718-1

RHSA-2005:306

RHSA-2005_306

Affected Products

Ethereal

Red Hat

References · 22

• 🔥 https://exploit-db.com/exploits/874 · Exploit
• http://redhat.com/support/errata/RHSA-2005-306.html · Vendor Advisory
• http://ethereal.com/appnotes/enpa-sa-00018.html · Patch
• http://redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200503-16.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0739 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2005:053 · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-0739.html · Note
• https://redhat.com/security/data/cve/CVE-2005-0699.html · Note
• http://securityfocus.com/bid/12762 · Note
• http://marc.info/?l=bugtraq&m=111066805726551&w=2 · Note
• http://debian.org/security/2005/dsa-718 · Patch, Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-0704.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9687 · Note
• http://securityfocus.com/bid/12759 · Note