medium5.0Public exploit code
CVE-2004-0633
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities2004-08-05 · remote · linux · Verified
Impact
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ethereal Group | Ethereal | Versions 0.10.3, 0.10.4 |
| Gentoo | Linux | All versions |
| Mandrakesoft | Mandrake Linux | Versions 9.2, 10.0 |
| Redhat | Enterprise Linux | Versions 2.1, 3.0 |
| Redhat | Linux Advanced Workstation | Version 2.1 |
References
- NVD record
- CVE.org record
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
- http://secunia.com/advisories/12024
- http://securitytracker.com/id?1010655
- http://www.ethereal.com/appnotes/enpa-sa-00015.html
- http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml
- http://www.kb.cert.org/vuls/id/829422
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067
- http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html
- http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html
- http://www.redhat.com/support/errata/RHSA-2004-378.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16630
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9931
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
- http://secunia.com/advisories/12024
- http://securitytracker.com/id?1010655
- http://www.ethereal.com/appnotes/enpa-sa-00015.html
- http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml
- http://www.kb.cert.org/vuls/id/829422
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067
- http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html
- http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html
- http://www.redhat.com/support/errata/RHSA-2004-378.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16630