CVE catalog
CVE-2005-0739
ethereal - buffer overflow
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 7.61% · Oct 25, 2026
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions. security flaw
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | ethereal | 3.0 | 0.9.4-1woody11 | vulnerable |
| Debian | ethereal | 3.0 | 0.9.4-1woody9 | vulnerable |
| Debian | ethereal | 3.0 | 0.9.4-1woody12 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | ethereal | deb | 3.0 | 0.9.4-1woody12 | Not reported | DSA-718-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: