Executive Summary

Informations
Name	CVE-2005-3243	First vendor Publication	2005-10-27
Vendor	Cve	Last vendor Modification	2010-08-21

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides user account access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3243

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:9836
Oval ID:	oval:org.mitre.oval:def:9836
Title:	Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
Description:	Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-3243	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section ethereal-gnome is earlier than 0:0.10.13-1.EL3.1 AND ethereal is earlier than 0:0.10.13-1.EL3.1 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section ethereal-gnome is earlier than 0:0.10.13-1.EL4.1 AND ethereal is earlier than 0:0.10.13-1.EL4.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Ethereal Group Ethereal cpe:/a:ethereal_group:ethereal:0.9.9 cpe:/a:ethereal_group:ethereal:0.9.8 cpe:/a:ethereal_group:ethereal:0.9.7 cpe:/a:ethereal_group:ethereal:0.9.6 cpe:/a:ethereal_group:ethereal:0.9.5 cpe:/a:ethereal_group:ethereal:0.9.4 cpe:/a:ethereal_group:ethereal:0.9.3 cpe:/a:ethereal_group:ethereal:0.9.2 cpe:/a:ethereal_group:ethereal:0.9.16 cpe:/a:ethereal_group:ethereal:0.9.15 cpe:/a:ethereal_group:ethereal:0.9.14 cpe:/a:ethereal_group:ethereal:0.9.13 cpe:/a:ethereal_group:ethereal:0.9.12 cpe:/a:ethereal_group:ethereal:0.9.11 cpe:/a:ethereal_group:ethereal:0.9.10 cpe:/a:ethereal_group:ethereal:0.9.1 cpe:/a:ethereal_group:ethereal:0.10.9 cpe:/a:ethereal_group:ethereal:0.10.8 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.5 cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.12 cpe:/a:ethereal_group:ethereal:0.10.11 cpe:/a:ethereal_group:ethereal:0.10.10 cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.0	29

Open Source Vulnerability Database (OSVDB)

id	Description
20135	Ethereal AgentX Dissector Remote Overflow
20126	Ethereal SLIMP3 Dissector Remote Overflow

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/15148
CONFIRM	http://www.ethereal.com/appnotes/enpa-sa-00021.html
DEBIAN	http://www.debian.org/security/2006/dsa-1171
FEDORA	http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html
GENTOO	http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml
MISC	http://www.frsirt.com/exploits/20051020.ethereal_slimp3_bof.py.php
OSVDB	http://www.osvdb.org/20126 http://www.osvdb.org/20135
REDHAT	http://www.redhat.com/support/errata/RHSA-2005-809.html
SECTRACK	http://securitytracker.com/id?1015082
SECUNIA	http://secunia.com/advisories/17254 http://secunia.com/advisories/17286 http://secunia.com/advisories/17327 http://secunia.com/advisories/17377 http://secunia.com/advisories/17392 http://secunia.com/advisories/17480 http://secunia.com/advisories/21813
SUSE	http://www.novell.com/linux/security/advisories/2005_25_sr.html

Alert History

Date	Informations
2013-05-11 11:32:47	Multiple Updates