FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0367

This CVE name corresponds to:

Entered Topic
2004-03-26 multiple vulnerabilities in ethereal

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2004-0367
Phase Assigned(20040322)

Description

Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.

References

Source Reference
CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00013.html
MLIST [Ethereal-dev] 20040416 Possibly incorrect CVE entry CAN-2004-0367
BUGTRAQ 20040329 LNSA-#2004-0007: Multiple security problems in Ethereal
GENTOO GLSA-200403-07
CONECTIVA CLA-2004:835
MANDRAKE MDKSA-2004:024
REDHAT RHSA-2004:136
REDHAT RHSA-2004:137
CERT-VN VU#792286
OVAL oval:org.mitre.oval:def:880
OVAL oval:org.mitre.oval:def:905
SECUNIA 11185
XF ethereal-zero-presentation-dos(15570)