CVE-2002-1356 | BDVDB-2026-4817 Detail

Description#

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.redhat.com/support/errata/RHSA-2002-290.html
http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13
http://www.ethereal.com/appnotes/enpa-sa-00007.html

Exploit#

No public exploit known

History#

Version 12002-12-17Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.