QwikSec

Security Database

CVE

CWE

Training

CVE-2005-0739

Published: Mar 13, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_GENTOO

vendor-advisory

x_refsource_MANDRAKE

http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707

x_refsource_MISC

http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05

x_refsource_MISC

http://www.ethereal.com/appnotes/enpa-sa-00018.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

oval:org.mitre.oval:def:9687

vdb-entry

signature

x_refsource_OVAL

FLSA-2006:152922

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_DEBIAN

20050312 Ethereal remote buffer overflow #2

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.