7.5

CVE-2005-3651

Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ethereal Group ≫ Ethereal Version0.7.7
Ethereal Group ≫ Ethereal Version0.8
Ethereal Group ≫ Ethereal Version0.8.5
Ethereal Group ≫ Ethereal Version0.8.13
Ethereal Group ≫ Ethereal Version0.8.14
Ethereal Group ≫ Ethereal Version0.8.15
Ethereal Group ≫ Ethereal Version0.8.18
Ethereal Group ≫ Ethereal Version0.8.19
Ethereal Group ≫ Ethereal Version0.9
Ethereal Group ≫ Ethereal Version0.9.1
Ethereal Group ≫ Ethereal Version0.9.2
Ethereal Group ≫ Ethereal Version0.9.3
Ethereal Group ≫ Ethereal Version0.9.4
Ethereal Group ≫ Ethereal Version0.9.5
Ethereal Group ≫ Ethereal Version0.9.6
Ethereal Group ≫ Ethereal Version0.9.7
Ethereal Group ≫ Ethereal Version0.9.8
Ethereal Group ≫ Ethereal Version0.9.9
Ethereal Group ≫ Ethereal Version0.9.10
Ethereal Group ≫ Ethereal Version0.9.11
Ethereal Group ≫ Ethereal Version0.9.12
Ethereal Group ≫ Ethereal Version0.9.13
Ethereal Group ≫ Ethereal Version0.9.14
Ethereal Group ≫ Ethereal Version0.9.15
Ethereal Group ≫ Ethereal Version0.9.16
Ethereal Group ≫ Ethereal Version0.10
Ethereal Group ≫ Ethereal Version0.10.1
Ethereal Group ≫ Ethereal Version0.10.2
Ethereal Group ≫ Ethereal Version0.10.3
Ethereal Group ≫ Ethereal Version0.10.4
Ethereal Group ≫ Ethereal Version0.10.5
Ethereal Group ≫ Ethereal Version0.10.6
Ethereal Group ≫ Ethereal Version0.10.7
Ethereal Group ≫ Ethereal Version0.10.8
Ethereal Group ≫ Ethereal Version0.10.9
Ethereal Group ≫ Ethereal Version0.10.10
Ethereal Group ≫ Ethereal Version0.10.11
Ethereal Group ≫ Ethereal Version0.10.12
Ethereal Group ≫ Ethereal Version0.10.13
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.2% 0.926
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
http://secunia.com/advisories/18331
http://secunia.com/advisories/18426
http://secunia.com/advisories/18911
http://secunia.com/advisories/19230
http://www.ethereal.com/appnotes/enpa-sa-00022.html
URL Repurposed
http://www.redhat.com/support/errata/RHSA-2006-0156.html
http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c
URL Repurposed
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html
http://secunia.com/advisories/17973
http://secunia.com/advisories/18012
http://secunia.com/advisories/18062
http://secunia.com/advisories/19012
http://securityreason.com/securityalert/247
http://securitytracker.com/id?1015337
http://www.debian.org/security/2005/dsa-920
http://www.gentoo.org/security/en/glsa/glsa-200512-06.xml
http://www.idefense.com/application/poi/display?id=349&type=vulnerabilities
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:227
http://www.mandriva.com/security/advisories?name=MDKSA-2006:002
http://www.securityfocus.com/bid/15794
Patch
http://www.vupen.com/english/advisories/2005/2830
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11286