CVE-2004-0176

Public PoC / Exploit (3)

Exploit-DBEthereal 0.10.0 < 0.10.2 - IGAP Overflow Exploit-DBEthereal - EIGRP Dissector TLV_IP_INT Long IP Remote Denial of Service TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.

Affected Products (24)

ethereal_group · etherealvulnerable

References (20)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835

http://marc.info/?l=bugtraq&m=108007072215742&w=2

http://marc.info/?l=bugtraq&m=108058005324316&w=2

http://marc.info/?l=bugtraq&m=108213710306260&w=2

http://secunia.com/advisories/11185

http://security.e-matters.de/advisories/032004.html

http://security.gentoo.org/glsa/glsa-200403-07.xml

http://www.debian.org/security/2004/dsa-511

PatchVendor Advisory

http://www.ethereal.com/appnotes/enpa-sa-00013.html

URL Repurposed

http://www.kb.cert.org/vuls/id/119876

US Government Resource

http://www.kb.cert.org/vuls/id/125156

US Government Resource

http://www.kb.cert.org/vuls/id/433596

US Government Resource

http://www.kb.cert.org/vuls/id/591820

US Government Resource

http://www.kb.cert.org/vuls/id/644886

US Government Resource

http://www.kb.cert.org/vuls/id/659140

US Government Resource

http://www.kb.cert.org/vuls/id/740188

US Government Resource

http://www.kb.cert.org/vuls/id/864884

US Government Resource

http://www.kb.cert.org/vuls/id/931588

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2004:024

http://www.osvdb.org/6893