CVE-2005-2367

Published: Aug 10, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.

Affected (25)

Products: Ethereal Group: Ethereal

1 product

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Ethereal Group Ethereal	Version 0.10.0
Ethereal Group Ethereal	Version 0.10.10
Ethereal Group Ethereal	Version 0.10.11
Ethereal Group Ethereal	Version 0.10.1
Ethereal Group Ethereal	Version 0.10.2
Ethereal Group Ethereal	Version 0.10.3
Ethereal Group Ethereal	Version 0.10.4
Ethereal Group Ethereal	Version 0.10.5
Ethereal Group Ethereal	Version 0.10.6
Ethereal Group Ethereal	Version 0.10.7
Ethereal Group Ethereal	Version 0.10.8
Ethereal Group Ethereal	Version 0.10.9
Ethereal Group Ethereal	Version 0.9.10
Ethereal Group Ethereal	Version 0.9.11
Ethereal Group Ethereal	Version 0.9.12
Ethereal Group Ethereal	Version 0.9.13
Ethereal Group Ethereal	Version 0.9.14
Ethereal Group Ethereal	Version 0.9.15
Ethereal Group Ethereal	Version 0.9.16
Ethereal Group Ethereal	Version 0.9.4
Ethereal Group Ethereal	Version 0.9.5
Ethereal Group Ethereal	Version 0.9.6
Ethereal Group Ethereal	Version 0.9.7
Ethereal Group Ethereal	Version 0.9.8
Ethereal Group Ethereal	Version 0.9.9

References (26)

http://secunia.com/advisories/16225/

Source: secalert@redhat.com

http://secunia.com/advisories/17102

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-853

Source: secalert@redhat.com

http://www.ethereal.com/appnotes/enpa-sa-00020.html

Source: secalert@redhat.com

PatchURL Repurposed

http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml

Source: secalert@redhat.com

Patch

http://www.idefense.com/application/poi/display?id=289&type=vulnerabilities

Source: secalert@redhat.com

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:131

Source: secalert@redhat.com

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_18_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_19_sr.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-687.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14399

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10765

Source: secalert@redhat.com

http://secunia.com/advisories/16225/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17102

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-853

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ethereal.com/appnotes/enpa-sa-00020.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchURL Repurposed

http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.idefense.com/application/poi/display?id=289&type=vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:131

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_18_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_19_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-687.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14399

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10765

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.