5
CVE-2005-0739
- EPSS 17.02%
- Published 02.05.2005 04:00:00
- Last modified 03.04.2025 01:03:51
- Source security@debian.org
- Teams watchlist Login
- Open Login
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.
Data is provided by the National Vulnerability Database (NVD)
Ethereal Group ≫ Ethereal Version <= 0.10.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 17.02% | 0.944 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|