PT-2005-4056 · Ethereal+1 · Ethereal+1

Published 2005-10-25 · Updated 2024-02-14 · CVE-2005-3242

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.10.12 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via unknown vectors in the IrDA dissector and the SMB dissector when SMB transaction payload reassembly is enabled.

Recommendations For versions 0.10.12 and earlier, consider disabling the IrDA and SMB dissectors to prevent potential crashes until a fix is available. Restrict access to the SMB transaction payload reassembly feature to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3242

DSA-1171

RHSA-2005:809

RHSA-2005_809

Affected Products

Ethereal

Red Hat

References · 30

• http://redhat.com/support/errata/RHSA-2005-809.html · Vendor Advisory
• http://redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1171 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3242 · Security Note
• http://ethereal.com/appnotes/enpa-sa-00021.html · Patch
• http://gentoo.org/security/en/glsa/glsa-200510-25.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_25_sr.html · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-3243.html · Note
• https://redhat.com/security/data/cve/CVE-2005-3248.html · Note
• http://securitytracker.com/id?1015082 · Note
• https://redhat.com/security/data/cve/CVE-2005-3245.html · Note
• http://secunia.com/advisories/21813 · Note
• http://secunia.com/advisories/17254 · Note
• http://secunia.com/advisories/17286 · Note
• http://secunia.com/advisories/17480 · Note