CVE-2005-3651

Published: Dec 10, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.

Affected (39)

Products: Ethereal Group: Ethereal

1 product

Configuration A

39 vulnerable

Vulnerable Software	Affected Versions
Ethereal Group Ethereal	Version 0.10.10
Ethereal Group Ethereal	Version 0.10.11
Ethereal Group Ethereal	Version 0.10.12
Ethereal Group Ethereal	Version 0.10.13
Ethereal Group Ethereal	Version 0.10.1
Ethereal Group Ethereal	Version 0.10.2
Ethereal Group Ethereal	Version 0.10.3
Ethereal Group Ethereal	Version 0.10.4
Ethereal Group Ethereal	Version 0.10.5
Ethereal Group Ethereal	Version 0.10.6
Ethereal Group Ethereal	Version 0.10.7
Ethereal Group Ethereal	Version 0.10.8
Ethereal Group Ethereal	Version 0.10.9
Ethereal Group Ethereal	Version 0.10
Ethereal Group Ethereal	Version 0.7.7
Ethereal Group Ethereal	Version 0.8.13
Ethereal Group Ethereal	Version 0.8.14
Ethereal Group Ethereal	Version 0.8.15
Ethereal Group Ethereal	Version 0.8.18
Ethereal Group Ethereal	Version 0.8.19
Ethereal Group Ethereal	Version 0.8.5
Ethereal Group Ethereal	Version 0.8
Ethereal Group Ethereal	Version 0.9.10
Ethereal Group Ethereal	Version 0.9.11
Ethereal Group Ethereal	Version 0.9.12
Ethereal Group Ethereal	Version 0.9.13
Ethereal Group Ethereal	Version 0.9.14
Ethereal Group Ethereal	Version 0.9.15
Ethereal Group Ethereal	Version 0.9.16
Ethereal Group Ethereal	Version 0.9.1
Ethereal Group Ethereal	Version 0.9.2
Ethereal Group Ethereal	Version 0.9.3
Ethereal Group Ethereal	Version 0.9.4
Ethereal Group Ethereal	Version 0.9.5
Ethereal Group Ethereal	Version 0.9.6
Ethereal Group Ethereal	Version 0.9.7
Ethereal Group Ethereal	Version 0.9.8
Ethereal Group Ethereal	Version 0.9.9
Ethereal Group Ethereal	Version 0.9

References (46)

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U (unsafe URL)

Source: cve@mitre.org

http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c

Source: cve@mitre.org

URL Repurposed

http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html

Source: cve@mitre.org

http://secunia.com/advisories/17973

Source: cve@mitre.org

http://secunia.com/advisories/18012

Source: cve@mitre.org

http://secunia.com/advisories/18062

Source: cve@mitre.org

http://secunia.com/advisories/18331

Source: cve@mitre.org

http://secunia.com/advisories/18426

Source: cve@mitre.org

http://secunia.com/advisories/18911

Source: cve@mitre.org

http://secunia.com/advisories/19012

Source: cve@mitre.org

http://secunia.com/advisories/19230

Source: cve@mitre.org

http://securityreason.com/securityalert/247

Source: cve@mitre.org

http://securitytracker.com/id?1015337

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-920

Source: cve@mitre.org

http://www.ethereal.com/appnotes/enpa-sa-00022.html

Source: cve@mitre.org

URL Repurposed

http://www.gentoo.org/security/en/glsa/glsa-200512-06.xml

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=349&type=vulnerabilities

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:227

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:002

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0156.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/15794

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2005/2830

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11286

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c

Source: af854a3a-2127-422b-91ae-364da2661108

URL Repurposed

http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17973

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18012

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18062

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18331

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18426

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18911

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19012

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19230

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/247

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015337

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-920

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ethereal.com/appnotes/enpa-sa-00022.html

Source: af854a3a-2127-422b-91ae-364da2661108

URL Repurposed

http://www.gentoo.org/security/en/glsa/glsa-200512-06.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.idefense.com/application/poi/display?id=349&type=vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:227

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:002

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0156.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15794

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2005/2830

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11286

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.