Vulnerabilites - CVE-2003-0429

Status:

Candidate

Description:

The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.

Reference:

CONFIRM:http://www.ethereal.com/appnotes/enpa-sa-00010.html
DEBIAN:DSA-324
URL:http://www.debian.org/security/2003/dsa-324
CONECTIVA:CLA-2003:662
URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000662
REDHAT:RHSA-2003:077
URL:http://www.redhat.com/support/errata/RHSA-2003-077.html
SCO:CSSA-2003-030.0
URL:ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-030.0.txt
SECUNIA:9007
URL:http://secunia.com/advisories/9007
OVAL:oval:org.mitre.oval:def:84
URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:84

Phase:

Assigned (20030613)

CVE ID

Protocol

SoursePort

TargetPort

Other Vulnerabilities:

Year	CEV (3053) Common Vulnerabilities and Exposures	CAN (20174) Candidate
1999	CVE-1999 (821)	CAN-1999 (749 )
2000	CVE-2000 (808)	CAN-2000 (423 )
2001	CVE-2001 (625)	CAN-2001 (934 )
2002	CVE-2002 (643)	CAN-2002 (1566)
2003	CVE-2003 (81 )	CAN-2003 (1236)
2004	CVE-2004 (75 )	CAN-2004 (2601)
2005	-	CAN-2005 (4825)
2006	-	CAN-2006 (6982)
2007	-	CAN-2007 (858 )