CVE-2005-0704: Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary… | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published May 2, 2005

CVE-2005-0704

Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary…

–

CVSS

3.7%

EPSS

No

On KEV

Description

Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.

Exploitation

Is it being used?

Exploit prediction (EPSS)3.7% · higher than 90% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

ET

Ethereal · Ethereal Group

0.10.7; 0.10.8; 0.10.9 · source: NVD

Affected product

ET

Ethereal

Ethereal Group

All Ethereal CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2005-0704

https://www.cve.org/CVERecord?id=CVE-2005-0704

Vendor Advisory

http://www.ethereal.com/appnotes/enpa-sa-00018.html

http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml

www.mandriva.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:053

http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html

http://www.redhat.com/support/errata/RHSA-2005-306.html

www.securityfocus.com

http://www.securityfocus.com/bid/12762

More from Ethereal

–

The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a…

–

Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet

–

The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors

–

The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown…

–

Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified…