CVE-2003-0926

Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain malformed (1) ISAKMP or (2) MEGACO packets.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-12-01

Last modified

2024-08-08

Affected products

• Ethereal (Ethereal Group)

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780
• http://secunia.com/advisories/10531
• http://www.debian.org/security/2003/dsa-407
• http://www.ethereal.com/appnotes/enpa-sa-00011.html
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:114
• http://www.redhat.com/support/errata/RHSA-2003-323.html
• http://www.redhat.com/support/errata/RHSA-2003-324.html
• http://www.securityfocus.com/bid/8951
• http://www.turbolinux.com/security/TLSA-2003-64.txt
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11648