ethereal records
4 published records for vendor ethereal.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 75%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
42Plan | CVE-2003-0356No exploit | Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute ethereal · ethereal · CWE-193 | Critical9.8 | 9.5%Jun 9, 2003 |
32Monitor | CVE-2004-0365No exploit | The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of serethereal · ethereal · CWE-476 | High7.5 | 5.8%May 4, 2004 |
32Monitor | CVE-2002-0401No exploit | SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malfoethereal · ethereal · CWE-476 | High7.5 | 5.5%Jun 18, 2002 |
31Monitor | CVE-2003-1013No exploit | The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Qethereal · ethereal · CWE-476 | High7.5 | 2.9%Jan 5, 2004 |
- CVE-2003-035642Plan
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute
CriticalCVSS 9.8No exploitEPSS 9%ethereal · etherealJun 9, 2003
- CVE-2004-036532Monitor
The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of ser
HighCVSS 7.5No exploitEPSS 5%ethereal · etherealMay 4, 2004
- CVE-2002-040132Monitor
SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malfo
HighCVSS 7.5No exploitEPSS 5%ethereal · etherealJun 18, 2002
- CVE-2003-101331Monitor
The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q
HighCVSS 7.5No exploitEPSS 2%ethereal · etherealJan 5, 2004