Login Request a demo
Unscored severity · published Dec 10, 2005
CVE-2005-3651
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers…
–
CVSS
6.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.2% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ET
Ethereal · Ethereal Group
0.7.7; 0.8; 0.8.5; 0.8.13; 0.8.14; 0.8.15; +33 more · source: NVD
Affected product
ET
Ethereal
Ethereal Group
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3651
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3651
URL Repurposed
http://anonsvn.ethereal.com/viewcvs/viewcvs.py/trunk/epan/dissectors/packet-ospf.c
lists.suse.de
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html
secunia.com
http://secunia.com/advisories/17973
secunia.com
http://secunia.com/advisories/18012
secunia.com
http://secunia.com/advisories/18062
More from Ethereal
–
CVE-2010-1455
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a…
–
CVE-2007-6121
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet
–
CVE-2007-6120
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors
–
CVE-2007-6118
The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown…
–
CVE-2007-6111
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified…