Vulnerabilities (CVE)

Filtered by vendor Ethereal Group Subscribe
Filtered by product Ethereal
Total 105 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0432 1 Ethereal Group 1 Ethereal 2024-02-14 10.0 HIGH N/A
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.
CVE-2005-1462 1 Ethereal Group 1 Ethereal 2024-02-14 7.5 HIGH N/A
Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
CVE-2005-3245 1 Ethereal Group 1 Ethereal 2024-02-14 5.0 MEDIUM N/A
Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service (memory consumption).
CVE-1999-1227 1 Ethereal Group 1 Ethereal 2024-02-14 7.2 HIGH N/A
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
CVE-2006-1939 1 Ethereal Group 1 Ethereal 2024-02-14 5.0 MEDIUM N/A
Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) an invalid display filter, or the (2) GSM SMS, (3) ASN.1-based, (4) DCERPC NT, (5) PER, (6) RPC, (7) DCERPC, and (8) ASN.1 dissectors.
CVE-2005-0007 1 Ethereal Group 1 Ethereal 2024-02-14 5.0 MEDIUM N/A
Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion).
CVE-2006-1935 1 Ethereal Group 1 Ethereal 2024-02-14 5.0 MEDIUM N/A
Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the COPS dissector.
CVE-2004-0635 4 Ethereal Group, Gentoo, Mandrakesoft and 1 more 5 Ethereal, Linux, Mandrake Linux and 2 more 2024-02-14 5.0 MEDIUM N/A
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.
CVE-2005-0084 1 Ethereal Group 1 Ethereal 2024-02-14 7.5 HIGH N/A
Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet.
CVE-2004-0176 1 Ethereal Group 1 Ethereal 2024-02-14 5.0 MEDIUM N/A
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
CVE-2005-0765 1 Ethereal Group 1 Ethereal 2024-02-14 5.0 MEDIUM N/A
Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).
CVE-2005-0704 1 Ethereal Group 1 Ethereal 2024-02-14 7.5 HIGH N/A
Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.
CVE-2005-1457 1 Ethereal Group 1 Ethereal 2024-02-14 5.0 MEDIUM N/A
Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).
CVE-2002-0822 1 Ethereal Group 1 Ethereal 2024-02-14 7.5 HIGH N/A
Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump.
CVE-2005-3651 1 Ethereal Group 1 Ethereal 2024-02-14 7.5 HIGH N/A
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
CVE-2004-0504 2 Ethereal Group, Sgi 2 Ethereal, Propack 2024-02-14 5.0 MEDIUM N/A
Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.
CVE-2005-2366 1 Ethereal Group 1 Ethereal 2024-02-14 5.0 MEDIUM N/A
Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) via unknown attack vectors.
CVE-2002-1356 1 Ethereal Group 1 Ethereal 2024-02-14 7.5 HIGH N/A
Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.
CVE-2005-1461 1 Ethereal Group 1 Ethereal 2024-02-14 7.5 HIGH N/A
Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
CVE-2004-0634 4 Ethereal Group, Gentoo, Mandrakesoft and 1 more 5 Ethereal, Linux, Mandrake Linux and 2 more 2024-02-14 5.0 MEDIUM N/A
The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.