CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Ethereal Group » Ethereal » 0.9.14 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*
CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2007-6121 20 DoS 2007-11-23 2018-10-15
5.0
 None Remote Low Not required None None Partial
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.
2 CVE-2007-6120 119 DoS Overflow 2007-11-23 2018-10-15
5.0
 None Remote Low Not required None None Partial
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
3 CVE-2007-6118 DoS 2007-11-23 2018-10-15
7.8
 None Remote Low Not required None None Complete
The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
4 CVE-2007-6111 DoS 2007-11-23 2018-10-15
7.1
 None Remote Medium Not required None None Complete
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.
5 CVE-2006-3632 119 DoS Exec Code Overflow 2006-07-21 2018-10-18
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
6 CVE-2006-3629 DoS 2006-07-21 2018-10-18
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
7 CVE-2006-1939 DoS 2006-04-25 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) an invalid display filter, or the (2) GSM SMS, (3) ASN.1-based, (4) DCERPC NT, (5) PER, (6) RPC, (7) DCERPC, and (8) ASN.1 dissectors.
8 CVE-2006-1938 DoS 2006-04-25 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via the (1) Sniffer capture or (2) SMB PIPE dissector.
9 CVE-2005-4585 DoS 2005-12-29 2017-10-11
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
10 CVE-2005-3651 Exec Code Overflow 2005-12-10 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
11 CVE-2005-3313 DoS 2005-11-01 2017-10-11
5.0
 None Remote Low Not required None None Partial
The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).
12 CVE-2005-3246 DoS 2005-10-27 2017-10-11
5.0
 None Remote Low Not required None None Partial
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors.
13 CVE-2005-3243 Exec Code Overflow 2005-10-27 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
14 CVE-2005-3242 DoS 2005-10-27 2017-10-11
5.0
 None Remote Low Not required None None Partial
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.
15 CVE-2005-3241 DoS 2005-10-27 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors in the (1) ISAKMP, (2) FC-FCS, (3) RSVP, and (4) ISIS LSP dissector.
16 CVE-2005-2367 +Priv 2005-08-10 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.
17 CVE-2005-2365 DoS Overflow 2005-08-10 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors.
18 CVE-2005-2364 DoS 2005-08-10 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 allows remote attackers to cause a denial of service (application crash) via certain packets that cause a null pointer dereference.
19 CVE-2005-2363 DoS 2005-08-10 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
20 CVE-2005-2362 DoS 2005-08-10 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application crash) by reassembling certain packets.
21 CVE-2005-2361 DoS 2005-08-10 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial of service (application crash or abort) via unknown attack vectors.
22 CVE-2005-2360 DoS 2005-08-10 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial of service (free static memory and application crash) via unknown attack vectors.
23 CVE-2005-1470 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.
24 CVE-2005-1469 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer.
25 CVE-2005-1468 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference.
26 CVE-2005-1467 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vectors.
27 CVE-2005-1466 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors.
28 CVE-2005-1465 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop).
29 CVE-2005-1464 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).
30 CVE-2005-1463 Exec Code 2005-05-05 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
31 CVE-2005-1462 119 Exec Code Overflow 2005-05-05 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
32 CVE-2005-1461 DoS Exec Code Overflow 2005-05-05 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
33 CVE-2005-1460 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.
34 CVE-2005-1459 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).
35 CVE-2005-1458 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.
36 CVE-2005-1457 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).
37 CVE-2005-1456 DoS 2005-05-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).
38 CVE-2005-1281 DoS 2005-04-26 2008-09-05
5.0
 None Remote Low Not required None None Partial
Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.
39 CVE-2005-0084 Exec Code Overflow 2005-05-02 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet.
40 CVE-2004-1761 DoS 2004-12-31 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.
41 CVE-2004-1145 Bypass 2004-12-15 2017-10-11
5.0
 None Remote Low Not required None Partial None
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.
42 CVE-2004-1142 DoS 2004-12-15 2017-10-11
5.0
 None Remote Low Not required None None Partial
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.
43 CVE-2004-1140 DoS 2004-12-31 2017-10-11
5.0
 None Remote Low Not required None None Partial
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.
44 CVE-2004-1139 DoS 2004-12-15 2017-10-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).
45 CVE-2004-0635 DoS 2004-12-06 2017-10-11
5.0
 None Remote Low Not required None None Partial
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.
46 CVE-2004-0367 DoS 2004-05-04 2017-10-11
5.0
 None Remote Low Not required None None Partial
Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.
47 CVE-2004-0365 DoS 2004-05-04 2017-10-11
5.0
 None Remote Low Not required None None Partial
The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.
48 CVE-2004-0176 DoS Exec Code Overflow 2004-05-04 2017-10-11
5.0
 None Remote Low Not required None None Partial
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
49 CVE-2003-1013 DoS 2004-01-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.
50 CVE-2003-1012 DoS 2004-01-05 2017-10-11
5.0
 None Remote Low Not required None None Partial
The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.
Total number of vulnerabilities : 53   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.