Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 105

Export CSV
CVE-2002-0403

security flaw

DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more
CVE-2000-1174

security flaw

Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.

CVSS 2.0 · 7.5 High EPSS 5.8% KEV · Not listed
Vendors
Ethereal Group
Products
Ethereal
CVE-2002-0834

security flaw

Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more
CVE-2002-0402

security flaw

Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code while Ethereal is parsing keysyms.

CVSS 2.0 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more
CVE-2002-1356

security flaw

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.

CVSS 2.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux
CVE-2003-0081

security flaw

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.

CVSS 2.0 · 7.5 High EPSS 5.8% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux
CVE-2003-0357

security flaw

Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors.

CVSS 2.0 · 7.5 High EPSS 7.7% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux
CVE-2002-0822

security flaw

Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux and 1 more
CVE-2003-0429

security flaw

The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux
CVE-2003-0432

security flaw

Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.

CVSS 2.0 · 10.0 Critical EPSS 2.3% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux
CVE-2003-0428

security flaw

Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string.

CVSS 2.0 · 5.0 Medium EPSS 4.0% KEV · Not listed
Vendors
Ethereal Group Redhat
Products
Ethereal Enterprise Linux Linux