Unscored severity · published May 2, 2005
CVE-2005-0739
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows,…
–
CVSS
7.6%
EPSS
No
On KEV
Description
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ET
Ethereal · Ethereal Group
through 0.10.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0739
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0739
URL Repurposed
http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707
marc.info
http://marc.info/?l=bugtraq&m=111066805726551&w=2
security.lss.hr
http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05
Patch
http://www.debian.org/security/2005/dsa-718
Patch
http://www.ethereal.com/appnotes/enpa-sa-00018.html
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml
More from Ethereal
–
CVE-2010-1455
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a…
–
CVE-2007-6121
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet
–
CVE-2007-6120
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors
–
CVE-2007-6118
The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown…
–
CVE-2007-6111
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified…