Ethereal Group : Security Vulnerabilities, CVEs, Published In 1999 CVSS score >= 5

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.

Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.