FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0176

This CVE name corresponds to:

Entered Topic
2004-03-26 multiple vulnerabilities in ethereal

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2004-0176
Phase Assigned(20040225)

Description

Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.

References

Source Reference
BUGTRAQ 20040323 Advisory 03/2004: Multiple (13) Ethereal remote overflows
MISC http://security.e-matters.de/advisories/032004.html
CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00013.html
DEBIAN DSA-511
BUGTRAQ 20040329 LNSA-#2004-0007: Multiple security problems in Ethereal
GENTOO GLSA-200403-07
REDHAT RHSA-2004:136
REDHAT RHSA-2004:137
CONECTIVA CLA-2004:835
MANDRAKE MDKSA-2004:024
BUGTRAQ 20040416 [OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal)
CERT-VN VU#119876
CERT-VN VU#125156
CERT-VN VU#433596
CERT-VN VU#591820
CERT-VN VU#644886
CERT-VN VU#659140
CERT-VN VU#740188
CERT-VN VU#864884
CERT-VN VU#931588
OSVDB 6893
OVAL oval:org.mitre.oval:def:878
OVAL oval:org.mitre.oval:def:887
SECUNIA 11185
XF ethereal-multiple-dissectors-bo(15569)