CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Ethereal Group : Security Vulnerabilities Published In 2005

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2005-4585 DoS 2005-12-29 2010-08-21
7.8
None Remote Low Not required None None Complete
Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
2 CVE-2005-3651 Exec Code Overflow 2005-12-10 2010-08-21
7.5
User Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
3 CVE-2005-3313 DoS 2005-11-01 2010-08-21
5.0
None Remote Low Not required None None Partial
The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).
4 CVE-2005-3249 DoS 2005-10-27 2010-08-21
6.4
None Remote Low Not required None Partial Partial
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.
5 CVE-2005-3248 DoS 2005-10-27 2010-08-21
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (divide-by-zero) via unknown vectors.
6 CVE-2005-3247 DoS 2005-10-27 2010-08-21
5.0
None Remote Low Not required None None Partial
The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
7 CVE-2005-3246 DoS 2005-10-27 2013-09-10
5.0
None Remote Low Not required None None Partial
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors.
8 CVE-2005-3245 DoS 2005-10-27 2010-08-21
5.0
None Remote Low Not required None None Partial
Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service (memory consumption).
9 CVE-2005-3244 DoS 2005-10-27 2010-08-21
5.0
None Remote Low Not required None None Partial
The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
10 CVE-2005-3243 Exec Code Overflow 2005-10-27 2010-08-21
7.5
User Remote Low Not required Partial Partial Partial
Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
11 CVE-2005-3242 DoS 2005-10-27 2010-08-21
5.0
None Remote Low Not required None None Partial
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.
12 CVE-2005-3241 DoS 2005-10-27 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors in the (1) ISAKMP, (2) FC-FCS, (3) RSVP, and (4) ISIS LSP dissector.
13 CVE-2005-3184 Exec Code Overflow 2005-10-20 2010-08-21
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value.
14 CVE-2005-2367 +Priv 2005-08-10 2010-08-21
7.5
User Remote Low Not required Partial Partial Partial
Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.
15 CVE-2005-2366 DoS 2005-08-10 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) via unknown attack vectors.
16 CVE-2005-2365 DoS Overflow 2005-08-10 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors.
17 CVE-2005-2364 DoS 2005-08-10 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 allows remote attackers to cause a denial of service (application crash) via certain packets that cause a null pointer dereference.
18 CVE-2005-2363 DoS 2005-08-10 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
19 CVE-2005-2362 DoS 2005-08-10 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application crash) by reassembling certain packets.
20 CVE-2005-2361 DoS 2005-08-10 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial of service (application crash or abort) via unknown attack vectors.
21 CVE-2005-2360 DoS 2005-08-10 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial of service (free static memory and application crash) via unknown attack vectors.
22 CVE-2005-1470 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.
23 CVE-2005-1469 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer.
24 CVE-2005-1468 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference.
25 CVE-2005-1467 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vectors.
26 CVE-2005-1466 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors.
27 CVE-2005-1465 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop).
28 CVE-2005-1464 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).
29 CVE-2005-1463 Exec Code 2005-05-05 2010-08-21
7.5
None Remote Low Not required Partial Partial Partial
Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
30 CVE-2005-1462 119 Exec Code Overflow 2005-05-05 2010-08-21
7.5
None Remote Low Not required Partial Partial Partial
Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
31 CVE-2005-1461 DoS Exec Code Overflow 2005-05-05 2010-08-21
7.5
User Remote Low Not required Partial Partial Partial
Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
32 CVE-2005-1460 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.
33 CVE-2005-1459 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).
34 CVE-2005-1458 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.
35 CVE-2005-1457 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).
36 CVE-2005-1456 DoS 2005-05-05 2010-08-21
5.0
None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).
37 CVE-2005-1281 DoS 2005-04-26 2008-09-05
5.0
None Remote Low Not required None None Partial
Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.
38 CVE-2005-0766 DoS 2005-05-02 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash).
39 CVE-2005-0765 DoS 2005-03-12 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).
40 CVE-2005-0739 189 Overflow 2005-05-02 2010-08-21
5.0
None Remote Low Not required None None Partial
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.
41 CVE-2005-0705 DoS 2005-05-02 2010-08-21
5.0
None Remote Low Not required None None Partial
The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service (application crash).
42 CVE-2005-0704 DoS Exec Code Overflow 2005-05-02 2010-08-21
7.5
User Remote Low Not required Partial Partial Partial
Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.
43 CVE-2005-0699 Exec Code Overflow 2005-03-08 2010-08-21
7.5
User Remote Low Not required Partial Partial Partial
Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.
44 CVE-2005-0084 Exec Code Overflow 2005-05-02 2010-08-21
7.5
User Remote Low Not required Partial Partial Partial
Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet.
45 CVE-2005-0010 DoS 2005-05-02 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory.
46 CVE-2005-0009 DoS 2005-05-02 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash).
47 CVE-2005-0008 Mem. Corr. 2005-05-02 2010-08-21
5.0
None Remote Low Not required None Partial None
Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption."
48 CVE-2005-0007 DoS 2005-05-02 2010-08-21
5.0
None Remote Low Not required None None Partial
Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion).
49 CVE-2005-0006 DoS 2005-05-02 2010-08-21
5.0
None Remote Low Not required None None Partial
The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop).
Total number of vulnerabilities : 49   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.