CVE-2005-1461: Buffer Overflow

Published May 5, 2005

Updated

Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIXQualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Affected Software

35 affected components

Ethereal Group Ethereal=0.8

Ethereal Group Ethereal=0.8.13

Ethereal Group Ethereal=0.8.14

Ethereal Group Ethereal=0.8.15

Ethereal Group Ethereal=0.8.18

Ethereal Group Ethereal=0.8.19

Ethereal Group Ethereal=0.9

Ethereal Group Ethereal=0.9.1

Ethereal Group Ethereal=0.9.2

Ethereal Group Ethereal=0.9.3

Ethereal Group Ethereal=0.9.4

Ethereal Group Ethereal=0.9.5

Ethereal Group Ethereal=0.9.6

Ethereal Group Ethereal=0.9.7

Ethereal Group Ethereal=0.9.8

Ethereal Group Ethereal=0.9.9

Ethereal Group Ethereal=0.9.10

Ethereal Group Ethereal=0.9.11

Ethereal Group Ethereal=0.9.12

Ethereal Group Ethereal=0.9.13

Ethereal Group Ethereal=0.9.14

Ethereal Group Ethereal=0.9.15

Ethereal Group Ethereal=0.9.16

Ethereal Group Ethereal=0.10

Ethereal Group Ethereal=0.10.0

Ethereal Group Ethereal=0.10.1

Ethereal Group Ethereal=0.10.2

Ethereal Group Ethereal=0.10.3

Ethereal Group Ethereal=0.10.4

Ethereal Group Ethereal=0.10.5

Ethereal Group Ethereal=0.10.6

Ethereal Group Ethereal=0.10.7

Ethereal Group Ethereal=0.10.8

Ethereal Group Ethereal=0.10.9

Ethereal Group Ethereal=0.10.10

Event History

May 5, 2005

CVE Published

via NVD·04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1461?

CVE-2005-1461 has a high severity due to multiple buffer overflow vulnerabilities that could allow remote code execution.

How do I fix CVE-2005-1461?

To fix CVE-2005-1461, upgrade Ethereal to version 0.10.11 or later where the vulnerability is addressed.

What versions of Ethereal are affected by CVE-2005-1461?

CVE-2005-1461 affects Ethereal versions prior to 0.10.11, including multiple versions from 0.8 to 0.10.10.

Can CVE-2005-1461 be exploited remotely?

Yes, CVE-2005-1461 can be exploited remotely, allowing attackers to execute arbitrary code on vulnerable systems.

What are the potential impacts of CVE-2005-1461?

The impacts of CVE-2005-1461 may include unauthorized access, system compromise, and complete control of the affected machine.