CVE-2004-0176

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 67.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-05-04 · updated 2026-06-16

Description

Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.

Affected products

Ethereal Group Ethereal: 0.8.13, 0.8.14, 0.8.18, 0.8.19, 0.9, 0.9.1 (+18)

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835
http://marc.info/?l=bugtraq&m=108007072215742&w=2
http://marc.info/?l=bugtraq&m=108058005324316&w=2
http://marc.info/?l=bugtraq&m=108213710306260&w=2
http://secunia.com/advisories/11185
http://security.e-matters.de/advisories/032004.html
http://security.gentoo.org/glsa/glsa-200403-07.xml
http://www.debian.org/security/2004/dsa-511
http://www.ethereal.com/appnotes/enpa-sa-00013.html
http://www.kb.cert.org/vuls/id/119876
http://www.kb.cert.org/vuls/id/125156
http://www.kb.cert.org/vuls/id/433596

Get alerted when CVE-2004-0176 or the next vulnerability affects your stack