Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-1470

6 documents6 sources
Severity
5.0MEDIUM
EPSS
12.7%
top 6.01%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Ethereal Group Ethereal
Timeline
PublishedMay 5
Latest updateMay 1

Description

Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDethereal_group/ethereal34 versions+33

Patches

Patch: www.ethereal.com ↗Patch: www.ethereal.com ↗Patch: www.ethereal.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-ffxc-fgvq-3579: Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0↗2022-05-01
▶
CVEList
CVE-2005-1470: Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0↗2005-05-05
▶

💥Exploits & PoCs

1
Exploit-DB
Ethereal 0.10.10 - 'dissect_ipc_state' Remote Denial of Service↗2005-05-07
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2005-05-04
▶

💬Community

1
Bugzilla
CVE-2005-1470 security flaw↗2018-08-16
▶