CVE-2000-1174 Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
HighCVSS 7.5
EPSS 5.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ethereal group ethereal | <= 0.8.13 | No fix listed |
References
- 20001118 [hacksware] Ethereal 0.8.13 AFS ACL parsing buffer overflow bug mailing-list
- CLSA-2000:342 vendor-advisory
- 20001121 ethereal: remote exploit vendor-advisory
- RHSA-2000:116 vendor-advisory
- 1972 exploit patch vdb-entry vendor-advisory
- ethereal-afs-bo(5557) vdb-entry