Vulnerability in Ethereal Group
CVE-2004-0634
The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.
EPSS: 0.053 (91.7th percentile) — read the EPSS interpretation.
Affected products
- Ethereal_group Ethereal — versions 0.9.15, 0.10.4
- Gentoo Linux
- Mandrakesoft Mandrake_linux — versions 9.2, 10.0
- Redhat Enterprise_linux — versions 2.1, 3.0
- Redhat Linux_advanced_workstation — versions 2.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_MANDRAKE, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, URL Repurposed)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)