| Vulnerability Name: | CVE-2002-0353 (CCN-8952) | ||||||||
| Assigned: | 2002-04-25 | ||||||||
| Published: | 2002-04-25 | ||||||||
| Updated: | 2008-09-10 | ||||||||
| Summary: | The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: CCN Type: SCO Security Advisory CSSA-2002-037.0 Linux: various packet handling vunerabilities in ethereal Source: CCN Type: Conectiva Linux Announcement CLSA-2002:474 ethereal Packet handling vulnerabilities Source: MITRE Type: CNA CVE-2002-0353 Source: CONECTIVA Type: UNKNOWN CLA-2002:474 Source: CCN Type: RHSA-2002-036 Updated ethereal packages available Source: CCN Type: RHSA-2002-088 Updated ethereal packages are available Source: DEBIAN Type: UNKNOWN DSA-130 Source: DEBIAN Type: DSA-130 ethereal -- remotely triggered memory allocation error Source: CCN Type: Ethereal Web site The Ethereal Network Analyzer Source: CCN Type: Ethereal Application Note enpa-sa-00003 ASN.1 zero-length g_malloc Source: CONFIRM Type: UNKNOWN http://www.ethereal.com/appnotes/enpa-sa-00003.html Source: XF Type: UNKNOWN ethereal-asn1-dos(8952) Source: CCN Type: OpenBSD 3.1 errata 013: SECURITY FIX: July 30, 2002 Source: CCN Type: OSVDB ID: 4473 Ethereal SNMP Dissector ASN.1 Parser Overflow DoS Source: CCN Type: OSVDB ID: 6924 Ethereal LDAP Dissector ASN.1 Parser Overflow DoS Source: CCN Type: OSVDB ID: 6925 Ethereal COPS Dissector ASN.1 Parser Overflow DoS Source: CCN Type: OSVDB ID: 6926 Ethereal Kerberos Dissector ASN.1 Parser Overflow DoS Source: REDHAT Type: UNKNOWN RHSA-2002:088 Source: BID Type: UNKNOWN 4604 Source: CCN Type: BID-4604 Ethereal ASN.1 String Memory Allocation Denial Of Service Vulnerability Source: XF Type: UNKNOWN ethereal-asn1-dos(8952) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||