CVE-2005-2367: High severity Ethereal Group Ethereal vulnerability
Published Aug 10, 2005
·Updated
Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.
Affected Software
25 affected components
Ethereal Group Ethereal=0.9.4
Ethereal Group Ethereal=0.9.5
Ethereal Group Ethereal=0.9.6
Ethereal Group Ethereal=0.9.7
Ethereal Group Ethereal=0.9.8
Ethereal Group Ethereal=0.9.9
Ethereal Group Ethereal=0.9.10
Ethereal Group Ethereal=0.9.11
Ethereal Group Ethereal=0.9.12
Ethereal Group Ethereal=0.9.13
Ethereal Group Ethereal=0.9.14
Ethereal Group Ethereal=0.9.15
Ethereal Group Ethereal=0.9.16
Ethereal Group Ethereal=0.10.0
Ethereal Group Ethereal=0.10.1
Ethereal Group Ethereal=0.10.2
Ethereal Group Ethereal=0.10.3
Ethereal Group Ethereal=0.10.4
Ethereal Group Ethereal=0.10.5
Ethereal Group Ethereal=0.10.6
Ethereal Group Ethereal=0.10.7
Ethereal Group Ethereal=0.10.8
Ethereal Group Ethereal=0.10.9
Ethereal Group Ethereal=0.10.10
Ethereal Group Ethereal=0.10.11
Remediation
Patch Available
Patch Available
Event History
Aug 10, 2005
CVE Published
via NVD·04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2367?
CVE-2005-2367 has a moderate severity rating as it allows remote attackers to potentially gain privileges through exploitation.
2
How do I fix CVE-2005-2367?
To mitigate the CVE-2005-2367 vulnerability, upgrade Ethereal to version 0.10.12 or later, or apply the vendor's patches if available.
3
What versions of Ethereal are affected by CVE-2005-2367?
CVE-2005-2367 affects Ethereal versions 0.9.4 through 0.10.11.
4
What type of vulnerability is CVE-2005-2367?
CVE-2005-2367 is a format string vulnerability that allows remote code execution through crafted packets.
5
Can CVE-2005-2367 be exploited remotely?
Yes, CVE-2005-2367 can be exploited remotely via specially crafted AFP packets.