Search vulnerabilities

Results 105

Export CSV
CVE-2003-1012

security flaw

The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
CVE-2004-0176

security flaw

Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.

CVSS 2.0 · 5.0 Medium EPSS 67.1% KEV · Not listed
CVE-2003-0429

security flaw

The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed
CVE-2004-0635

security flaw

The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.

CVSS 2.0 · 5.0 Medium EPSS 5.3% KEV · Not listed
Vendors
Products
CVE-2004-0634

security flaw

The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.

CVSS 2.0 · 5.0 Medium EPSS 5.3% KEV · Not listed
Vendors
Products
CVE-2004-1140

security flaw

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
CVE-2004-1141

security flaw

The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
CVE-2004-1145

security flaw

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.

CVSS 2.0 · 5.0 Medium EPSS 4.1% KEV · Not listed
Vendors
Products
CVE-2003-0428

security flaw

Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string.

CVSS 2.0 · 5.0 Medium EPSS 4.0% KEV · Not listed