Ethereal Group Ethereal vulnerabilities

CVE-2004-0505 [MEDIUM] CVE-2004-0505: The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert er The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.

CVE-2006-1938 [MEDIUM] CVE-2006-1938: Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via the (1) Sniffer capture or (2) SMB PIPE dissector.

CVE-2004-1142 [MEDIUM] CVE-2004-1142: Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.

CVE-2005-1468 [MEDIUM] CVE-2005-1468: Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference.

CVE-2005-1466 [MEDIUM] CVE-2005-1466: Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to c Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors.

CVE-2003-0430 [MEDIUM] CVE-2003-0430: The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of ser The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value.

CVE-2002-0353 [MEDIUM] CVE-2002-0353: The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields.

CVE-2004-1141 [MEDIUM] CVE-2004-1141: The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of se The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.

CVE-2002-0404 [MEDIUM] CVE-2002-0404: Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial o Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption).

CVE-2005-2362 [MEDIUM] CVE-2005-2362: Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers t Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application crash) by reassembling certain packets.

CVE-2005-1460 [MEDIUM] CVE-2005-1460: Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of s Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.

CVE-2004-0504 [MEDIUM] CVE-2004-0504: Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP message Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.

CVE-2004-1140 [MEDIUM] CVE-2004-1140: Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.

CVE-2002-0403 [MEDIUM] CVE-2002-0403: DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU con DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop.

CVE-2005-0705 [MEDIUM] CVE-2005-0705: The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enable The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service (application crash).

CVE-2005-1458 [MEDIUM] CVE-2005-1458: Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impa Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.

CVE-2010-1455 [MEDIUM] CWE-20 CVE-2010-1455: The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.

CVE-2004-1761 [MEDIUM] CVE-2004-1761: Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (se Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.

CVE-2005-0009 [MEDIUM] CVE-2005-0009: Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote atta Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash).

CVE-2005-0007 [MEDIUM] CVE-2005-0007: Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attacker Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion).