CVE-2004-0634: Medium severity Ethereal Group Ethereal vulnerability
Published Jul 8, 2004
·Updated
The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.
Affected Software
12 affected components
Ethereal Group Ethereal=0.9.15
Ethereal Group Ethereal=0.10.4
redhat Enterprise Linux=3.0
redhat Enterprise Linux=2.1
redhat Linux Advanced Workstation=2.1
Mandrakesoft Mandrake Linux=9.2
redhat Enterprise Linux=2.1
redhat Enterprise Linux=3.0
redhat Enterprise Linux=2.1
Mandrakesoft Mandrake Linux=10.0
Gentoo Linux
redhat Enterprise Linux=3.0
Remediation
Patch Available
Event History
Jul 8, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0634?
CVE-2004-0634 is considered a high severity vulnerability due to its potential to cause a denial of service.
2
What versions of Ethereal are affected by CVE-2004-0634?
CVE-2004-0634 affects Ethereal versions 0.9.15 to 0.10.4.
3
How do I fix CVE-2004-0634?
To fix CVE-2004-0634, upgrade Ethereal to a version later than 0.10.4 that addresses this vulnerability.
4
What type of attack does CVE-2004-0634 allow?
CVE-2004-0634 allows remote attackers to cause a denial of service via a null dereference.
5
Which operating systems are vulnerable to CVE-2004-0634?
CVE-2004-0634 impacts various versions of Gentoo Linux, Mandrake Linux, and Red Hat Enterprise Linux.