Vulnerability in Ethereal Group
CVE-2004-0635
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.
EPSS: 0.053 (91.7th percentile) — read the EPSS interpretation.
Affected products
- Ethereal_group Ethereal — versions 0.8.15, 0.8.16, 0.8.17
- Gentoo Linux
- Mandrakesoft Mandrake_linux — versions 9.2, 10.0
- Redhat Enterprise_linux — versions 2.1, 3.0
- Redhat Linux_advanced_workstation — versions 2.1
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_MANDRAKE, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, URL Repurposed)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory, Patch, Vendor Advisory)