CVE-2004-1142 Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ethereal group ethereal | = 0.9 | No fix listed |
| ethereal group ethereal | = 0.9.1 | No fix listed |
| ethereal group ethereal | = 0.9.2 | No fix listed |
| ethereal group ethereal | = 0.9.3 | No fix listed |
| ethereal group ethereal | = 0.9.4 | No fix listed |
| ethereal group ethereal | = 0.9.5 | No fix listed |
| ethereal group ethereal | = 0.9.6 | No fix listed |
| ethereal group ethereal | = 0.9.7 | No fix listed |
| ethereal group ethereal | = 0.9.8 | No fix listed |
| ethereal group ethereal | = 0.9.9 | No fix listed |
| ethereal group ethereal | = 0.9.10 | No fix listed |
| ethereal group ethereal | = 0.9.11 | No fix listed |
| ethereal group ethereal | = 0.9.12 | No fix listed |
| ethereal group ethereal | = 0.9.13 | No fix listed |
| ethereal group ethereal | = 0.9.14 | No fix listed |
| ethereal group ethereal | = 0.9.15 | No fix listed |
| ethereal group ethereal | = 0.9.16 | No fix listed |
| ethereal group ethereal | = 0.10 | No fix listed |
| ethereal group ethereal | = 0.10.1 | No fix listed |
| ethereal group ethereal | = 0.10.2 | No fix listed |
| ethereal group ethereal | = 0.10.3 | No fix listed |
| ethereal group ethereal | = 0.10.4 | No fix listed |
| ethereal group ethereal | = 0.10.5 | No fix listed |
| ethereal group ethereal | = 0.10.6 | No fix listed |
| ethereal group ethereal | = 0.10.7 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi propack | = 3.0 | No fix listed |
| conectiva linux | = 9.0 | No fix listed |
| conectiva linux | = 10.0 | No fix listed |
| altlinux alt linux | = 2.3 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
References
- CLA-2005:916 vendor-advisory
- 13468 patch third-party-advisory vendor-advisory
- P-061 government-resource patch third-party-advisory vendor-advisory
- DSA-613 patch vendor-advisory
- www.ethereal.com patch url-repurposed vendor-advisory
- GLSA-200412-15 patch vendor-advisory
- MDKSA-2004:152 vendor-advisory
- FLSA-2006:152922 vendor-advisory
- RHSA-2005:037 patch vendor-advisory
- 11943 patch vdb-entry vendor-advisory
- ethereal-smb-dos(18488) vdb-entry
- oval:org.mitre.oval:def:11278 signature vdb-entry