CVE-2002-1356

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*

History

14 Feb 2024, 01:17

Type Values Removed Values Added
References () http://www.ethereal.com/appnotes/enpa-sa-00007.html - Patch, Vendor Advisory () http://www.ethereal.com/appnotes/enpa-sa-00007.html - Patch, Vendor Advisory, URL Repurposed
References () http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13 - () http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13 - URL Repurposed

Information

Published : 2002-12-23 05:00

Updated : 2024-02-14 01:17


NVD link : CVE-2002-1356

Mitre link : CVE-2002-1356

CVE.ORG link : CVE-2002-1356


JSON object : View

Products Affected

ethereal_group

  • ethereal