PT-2005-2457 · Ethereal+1 · Ethereal+1

Published

2005-05-05

·

Updated

2024-02-14

·

CVE-2005-1461

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11
Description: The issue is related to multiple buffer overflows in various protocol dissectors in Ethereal, including SIP, CMIP, CMP, CMS, CRMF, ESS, OCSP, X.509, ISIS, DISTCC, FCELS, Q.931, NCP, TCAP, ISUP, MEGACO, PKIX1Explicit, PKIX Qualified, and Presentation. This could allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Recommendations: For Ethereal versions prior to 0.10.11, update to version 0.10.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable protocol dissectors until a patch is available.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2005-1461
RHSA-2005:427
RHSA-2005_427

Affected Products

Ethereal
Red Hat