CVE-2002-0353: Medium severity ethereal group ethereal vulnerability
Published May 3, 2002
·Updated
The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields.
Affected Software
2 affected components
Ethereal Group Ethereal=0.9.1
Ethereal Group Ethereal=0.9.2
Event History
May 3, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0353?
CVE-2002-0353 is classified as a denial of service vulnerability.
2
How do I fix CVE-2002-0353?
To resolve CVE-2002-0353, upgrade Ethereal to version 0.9.3 or later.
3
What software is affected by CVE-2002-0353?
CVE-2002-0353 affects Ethereal versions 0.9.1 and 0.9.2.
4
What type of attack does CVE-2002-0353 exploit?
CVE-2002-0353 exploits a vulnerability in the ASN.1 parser leading to a crash.
5
Is CVE-2002-0353 a remote vulnerability?
Yes, CVE-2002-0353 can be exploited by remote attackers.