medium5.0Public exploit code
CVE-2004-0176
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetF…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ethereal - EIGRP Dissector TLV_IP_INT Long IP Remote Denial of Service2004-03-26 · dos · multiple · Verified
- Ethereal 0.10.0 < 0.10.2 - IGAP Overflow2004-03-28 · remote · linux · Verified
Impact
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ethereal Group | Ethereal | Versions 0.8.13, 0.8.14, 0.8.18, 0.8.19, 0.9, 0.9.1 |
References
- NVD record
- CVE.org record
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835
- http://marc.info/?l=bugtraq&m=108007072215742&w=2
- http://marc.info/?l=bugtraq&m=108058005324316&w=2
- http://marc.info/?l=bugtraq&m=108213710306260&w=2
- http://secunia.com/advisories/11185
- http://security.e-matters.de/advisories/032004.html
- http://security.gentoo.org/glsa/glsa-200403-07.xml
- http://www.debian.org/security/2004/dsa-511
- http://www.ethereal.com/appnotes/enpa-sa-00013.html
- http://www.kb.cert.org/vuls/id/119876
- http://www.kb.cert.org/vuls/id/125156
- http://www.kb.cert.org/vuls/id/433596
- http://www.kb.cert.org/vuls/id/591820
- http://www.kb.cert.org/vuls/id/644886
- http://www.kb.cert.org/vuls/id/659140
- http://www.kb.cert.org/vuls/id/740188
- http://www.kb.cert.org/vuls/id/864884
- http://www.kb.cert.org/vuls/id/931588
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:024
- http://www.osvdb.org/6893
- http://www.redhat.com/support/errata/RHSA-2004-136.html
- http://www.redhat.com/support/errata/RHSA-2004-137.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15569
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10187
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A878