CVE-2005-3242

Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2005-10-27

Last modified

2024-08-07

Affected products

• Ethereal (Ethereal Group)

References

• http://secunia.com/advisories/17254
• http://secunia.com/advisories/17286
• http://secunia.com/advisories/17327
• http://secunia.com/advisories/17377
• http://secunia.com/advisories/17392
• http://secunia.com/advisories/17480
• http://secunia.com/advisories/21813
• http://securitytracker.com/id?1015082
• http://www.debian.org/security/2006/dsa-1171
• http://www.ethereal.com/appnotes/enpa-sa-00021.html
• http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml
• http://www.novell.com/linux/security/advisories/2005_25_sr.html
• http://www.osvdb.org/20125
• http://www.osvdb.org/20133
• http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html
• http://www.redhat.com/support/errata/RHSA-2005-809.html
• http://www.securityfocus.com/bid/15148
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10558