PT-2005-4059 · Ethereal+1 · Ethereal+1

Published 2005-10-25 · Updated 2024-02-14 · CVE-2005-3245

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.10.3 through 0.10.12

Description The issue is related to an unspecified vulnerability in the ONC RPC dissector. When the "Dissect unknown RPC program numbers" option is enabled, it allows remote attackers to cause a denial of service due to memory consumption.

Recommendations For Ethereal versions 0.10.3 through 0.10.12, consider disabling the "Dissect unknown RPC program numbers" option as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3245

RHSA-2005:809

RHSA-2005_809

Affected Products

Ethereal

Red Hat

References · 27

• https://nvd.nist.gov/vuln/detail/CVE-2005-3245 · Security Note
• http://redhat.com/support/errata/RHSA-2005-809.html · Vendor Advisory
• http://redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_25_sr.html · Vendor Advisory
• http://ethereal.com/appnotes/enpa-sa-00021.html · Patch
• http://gentoo.org/security/en/glsa/glsa-200510-25.xml · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2005-3243.html · Note
• http://osvdb.org/20129 · Note
• https://redhat.com/security/data/cve/CVE-2005-3248.html · Note
• http://securitytracker.com/id?1015082 · Note
• https://redhat.com/security/data/cve/CVE-2005-3245.html · Note
• http://secunia.com/advisories/17254 · Note
• http://secunia.com/advisories/17286 · Note
• http://secunia.com/advisories/17480 · Note
• https://redhat.com/security/data/cve/CVE-2005-3247.html · Note