Search vulnerabilities

Results 4

Export CSV
CVE-2002-0401

security flaw

SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.

CVSS 3.1 · 7.5 High EPSS 5.5% KEV · Not listed
Products
CVE-2003-0356

security flaw

Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.

CVSS 3.1 · 9.8 Critical EPSS 9.6% KEV · Not listed
Vendors
CVE-2003-1013

security flaw

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.

CVSS 3.1 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
CVE-2004-0365

security flaw

The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.

CVSS 3.1 · 7.5 High EPSS 5.9% KEV · Not listed
Vendors