5
CVE-2002-1355
- EPSS 1.71%
- Veröffentlicht 23.12.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:59:09
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ethereal Group ≫ Ethereal Version <= 0.9.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.71% | 0.744 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
http://www.ethereal.com/appnotes/enpa-sa-00007.html
http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68&r2=1.69
http://www.redhat.com/support/errata/RHSA-2002-290.html