PT-2005-4063 · Ethereal+1 · Ethereal+1

Published 2005-10-25 · Updated 2024-02-14 · CVE-2005-3249

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.10.1 through 0.10.12

Description The issue is related to an unspecified vulnerability in the WSP dissector. This vulnerability allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.

Recommendations For Ethereal versions 0.10.1 through 0.10.12, consider disabling the WSP dissector as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2005-3249

DSA-1171

RHSA-2005:809

RHSA-2005_809

Affected Products

Ethereal

Red Hat

References · 27

• http://redhat.com/support/errata/RHSA-2005-809.html · Vendor Advisory
• http://ethereal.com/appnotes/enpa-sa-00021.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3249 · Security Note
• http://redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_25_sr.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200510-25.xml · Vendor Advisory
• http://osvdb.org/20136 · Note
• https://redhat.com/security/data/cve/CVE-2005-3243.html · Note
• https://redhat.com/security/data/cve/CVE-2005-3248.html · Note
• http://securitytracker.com/id?1015082 · Note
• https://redhat.com/security/data/cve/CVE-2005-3245.html · Note
• http://secunia.com/advisories/17254 · Note
• http://secunia.com/advisories/17286 · Note
• http://secunia.com/advisories/17480 · Note
• https://redhat.com/security/data/cve/CVE-2005-3247.html · Note