NetSight
IP …
high7.5Public exploit code

CVE-2005-2367

Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to w…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.

Affected products

VendorProductAffected versions
Ethereal GroupEthereal
Versions 0.9.4, 0.9.5, 0.9.6, 0.9.7, 0.9.8, 0.9.9

References