1. CVE-Search
  2. CVE-2004-0176
ID CVE-2004-0176
Summary Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
References
Vulnerable Configurations
  • cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 14-02-2024 - 01:17)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
oval via4
  • accepted 2013-04-29T04:03:05.437-04:00
    class vulnerability
    contributors
    • name Aharon Chernin
      organization SCAP.com, LLC
    • name Dragos Prisaca
      organization G2, Inc.
    definition_extensions
    • comment The operating system installed on the system is Red Hat Enterprise Linux 3
      oval oval:org.mitre.oval:def:11782
    • comment CentOS Linux 3.x
      oval oval:org.mitre.oval:def:16651
    description Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
    family unix
    id oval:org.mitre.oval:def:10187
    status accepted
    submitted 2010-07-09T03:56:16-04:00
    title Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
    version 29
  • accepted 2007-04-25T19:53:06.459-04:00
    class vulnerability
    contributors
    • name Jay Beale
      organization Bastille Linux
    • name Jay Beale
      organization Bastille Linux
    • name Thomas R. Jones
      organization Maitreya Security
    description Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
    family unix
    id oval:org.mitre.oval:def:878
    status accepted
    submitted 2004-04-07T12:00:00.000-04:00
    title Multiple BO Vulnerabilities in Red Hat Ethereal
    version 38
  • accepted 2007-04-25T19:53:07.514-04:00
    class vulnerability
    contributors
    • name Jay Beale
      organization Bastille Linux
    • name Jay Beale
      organization Bastille Linux
    • name Jay Beale
      organization Bastille Linux
    • name Thomas R. Jones
      organization Maitreya Security
    description Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
    family unix
    id oval:org.mitre.oval:def:887
    status accepted
    submitted 2004-04-08T12:00:00.000-04:00
    title Multiple BO Vulnerabilities in Red Hat Enterprise 3 Ethereal
    version 38
redhat via4
advisories
  • rhsa
    id RHSA-2004:136
  • rhsa
    id RHSA-2004:137
rpms
  • ethereal-0:0.10.3-0.30E.1
  • ethereal-gnome-0:0.10.3-0.30E.1
refmap via4
bugtraq
  • 20040323 Advisory 03/2004: Multiple (13) Ethereal remote overflows
  • 20040329 LNSA-#2004-0007: Multiple security problems in Ethereal
  • 20040416 [OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal)
cert-vn
  • VU#119876
  • VU#125156
  • VU#433596
  • VU#591820
  • VU#644886
  • VU#659140
  • VU#740188
  • VU#864884
  • VU#931588
conectiva CLA-2004:835
confirm http://www.ethereal.com/appnotes/enpa-sa-00013.html
debian DSA-511
gentoo GLSA-200403-07
mandrake MDKSA-2004:024
misc http://security.e-matters.de/advisories/032004.html
osvdb 6893
secunia 11185
xf ethereal-multiple-dissectors-bo(15569)
Last major update 14-02-2024 - 01:17
Published 04-05-2004 - 04:00
Last modified 14-02-2024 - 01:17
Back to Top