PT-2004-1727 · Ethereal · Ethereal

·

CVE-2004-0635

·

Publicado

2004-07-08

·

Atualizado

2024-02-14

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Ethereal versions 0.8.15 through 0.10.4
Description The issue allows remote attackers to cause a denial of service, resulting in a process crash. This can be achieved via a malformed or missing community string, which causes an out-of-bounds read.
Recommendations For Ethereal versions 0.8.15 through 0.10.4, consider updating to a version outside of this range to resolve the issue. As a temporary workaround, restrict access to the SNMP dissector to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2004-0635
DSA-528
RHSA-2004:378

Produtos afetados

Ethereal