CVE-2005-0699 Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via R...
HighCVSS 7.5
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ethereal group ethereal | = 0.10.3 | No fix listed |
| ethereal group ethereal | = 0.10.4 | No fix listed |
| ethereal group ethereal | = 0.10.5 | No fix listed |
| ethereal group ethereal | = 0.10.6 | No fix listed |
| ethereal group ethereal | = 0.10.7 | No fix listed |
| ethereal group ethereal | = 0.10.8 | No fix listed |
| ethereal group ethereal | = 0.10.9 | No fix listed |
| conectiva linux | = 9.0 | No fix listed |
| conectiva linux | = 10.0 | No fix listed |
| altlinux alt linux | = compact_2.3 | No fix listed |
| altlinux alt linux | = junior_2.3 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux | = 4.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 4.0 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
References
- 20050309 RE: Ethereal remote buffer overflow - addon mailing-list
- 20050314 Ethereal 0.10.9 and below remote root exploit mailing-list
- GLSA-200503-16 patch vendor-advisory
- security.lss.hr
- www.ethereal.com exploit patch url-repurposed vendor-advisory
- MDKSA-2005:053 vendor-advisory
- FLSA-2006:152922 vendor-advisory
- RHSA-2005:306 patch vendor-advisory
- 20050308 Ethereal remote buffer overflow exploit mailing-list vendor-advisory
- 12759 exploit patch vdb-entry vendor-advisory
- oval:org.mitre.oval:def:10147 signature vdb-entry