1. CVE-Search
  2. CVE-2002-0404
ID CVE-2002-0404
Summary Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption).
References
Vulnerable Configurations
  • cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9_.0:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9_.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 14-02-2024 - 01:17)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
  • rhsa
    id RHSA-2002:036
  • rhsa
    id RHSA-2002:088
  • rhsa
    id RHSA-2002:170
refmap via4
bid 4808
bugtraq 20020529 Potential security issues in Ethereal
caldera CSSA-2002-037.0
conectiva CLSA-2002:505
confirm http://www.ethereal.com/appnotes/enpa-sa-00004.html
debian DSA-130
xf ethereal-giop-dissector-dos(9206)
Last major update 14-02-2024 - 01:17
Published 18-06-2002 - 04:00
Last modified 14-02-2024 - 01:17
Back to Top