CVE-2005-2367
CVE-2005-2367
Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/1139unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://secunia.com/advisories/16225/http://secunia.com/advisories/17102https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10765http://www.debian.org/security/2005/dsa-853http://www.ethereal.com/appnotes/enpa-sa-00020.htmlhttp://www.gentoo.org/security/en/glsa/glsa-200507-27.xmlhttp://www.idefense.com/application/poi/display?id=289&type=vulnerabilitieshttp://www.mandriva.com/security/advisories?name=MDKSA-2005:131http://www.novell.com/linux/security/advisories/2005_18_sr.htmlhttp://www.novell.com/linux/security/advisories/2005_19_sr.htmlhttp://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.htmlhttp://www.redhat.com/support/errata/RHSA-2005-687.html