Lucene search

K
cveDebianCVE-2005-0739
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0739

2005-05-0204:00:00
CWE-189
debian
web.nvd.nist.gov
39
cve-2005-0739
iapp dissector
ethereal
buffer overflows
security vulnerability
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.018

Percentile

88.4%

The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.

Affected configurations

Nvd
Node
ethereal_groupetherealRange0.10.9
VendorProductVersionCPE
ethereal_groupethereal*cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.018

Percentile

88.4%