Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2004-0635

Published: 06/12/2004 Updated: 14/02/2024
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Ethereal

Vulnerability Summary

The SNMP dissector in Ethereal 0.8.15 up to and including 0.10.4 allows remote malicious users to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.

Vulnerable Product Search on Vulmon Subscribe to Product

ethereal group ethereal 0.10.1

ethereal group ethereal 0.9.2

ethereal group ethereal 0.9.6

ethereal group ethereal 0.8.16

ethereal group ethereal 0.9.5

ethereal group ethereal 0.8.19

ethereal group ethereal 0.10.2

ethereal group ethereal 0.8.18

ethereal group ethereal 0.9.14

ethereal group ethereal 0.9.15

ethereal group ethereal 0.9.10

ethereal group ethereal 0.9.8

ethereal group ethereal 0.10.3

ethereal group ethereal 0.10.4

ethereal group ethereal 0.9.16

ethereal group ethereal 0.8.15

ethereal group ethereal 0.9.3

ethereal group ethereal 0.10

ethereal group ethereal 0.9.13

ethereal group ethereal 0.9.9

ethereal group ethereal 0.9.11

ethereal group ethereal 0.9.7

ethereal group ethereal 0.9.4

ethereal group ethereal 0.9.1

ethereal group ethereal 0.8.17

ethereal group ethereal 0.9

ethereal group ethereal 0.9.12

redhat enterprise linux 3.0

redhat enterprise linux 2.1

redhat linux advanced workstation 2.1

mandrakesoft mandrake linux 9.2

mandrakesoft mandrake linux 10.0

gentoo linux

Vendor Advisories

Red Hat: ethereal security update
Synopsis ethereal security update Type/Severity Security Advisory: Moderate Topic Updated Ethereal packages that fix various security vulnerabilities are nowavailable Description Ethereal is a program for monitoring network trafficThe SNMP dissector in Ethereal releases 0815 through 01 ...
Debian Security Advisories: DSA-528-1 ethereal -- denial of service
Several denial of service vulnerabilities were discovered in ethereal, a network traffic analyzer These vulnerabilities are described in the ethereal advisory "enpa-sa-00015" Of these, only one (CAN-2004-0635) affects the version of ethereal in Debian woody This vulnerability could be exploited by a remote attacker to crash ethereal with an inva ...

References

NVD-CWE-Otherhttp://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.htmlhttp://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.htmlhttp://www.gentoo.org/security/en/glsa/glsa-200407-08.xmlhttp://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067http://www.ethereal.com/appnotes/enpa-sa-00015.htmlhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916http://www.debian.org/security/2004/dsa-528http://www.redhat.com/support/errata/RHSA-2004-378.htmlhttp://www.kb.cert.org/vuls/id/835846http://securitytracker.com/id?1010655http://secunia.com/advisories/12024https://exchange.xforce.ibmcloud.com/vulnerabilities/16632https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9721https://access.redhat.com/errata/RHSA-2004:378https://nvd.nist.govhttps://www.kb.cert.org/vuls/id/835846
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook