CVE-2004-0633: ethereal_group ethereal

EPSS trend

Probability

17.96%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 17.96% on 20-09-2026

20-09-202620-10-2026

EPSS score

17.96%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotelinuxVerified
Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities
Maturity: weaponized

References

13 links

securitytracker.com/id?1010655VDB EntryX Refsource SECTRACK
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916Vendor AdvisoryX Refsource CONECTIVA
www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067Vendor AdvisoryX Refsource MANDRAKEPatch
www.ethereal.com/appnotes/enpa-sa-00015.htmlX Refsource CONFIRMURL Repurposed
www.kb.cert.org/vuls/id/829422Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/12024Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381X Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/16630VDB EntryX Refsource XF
www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.htmlVendor AdvisoryX Refsource FEDORAPatch
www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.htmlVendor AdvisoryX Refsource FEDORAPatch

Show all 13 references

www.redhat.com/support/errata/RHSA-2004-378.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9931VDB EntrySignatureX Refsource OVAL
www.gentoo.org/security/en/glsa/glsa-200407-08.xmlVendor AdvisoryX Refsource GENTOOPatch

Related vulnerabilities

CVE-2018-16850alpinepostgresql+395.15%7y ago13-11-2018 15:00postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.CVE-2018-16395alpineruby+2610.71%7y ago16-11-2018 18:00An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.CVE-2018-16396alpineruby+247.97%7y ago16-11-2018 18:00An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.CVE-2018-16866chainguardpy3-systemd+271.05%7y ago11-01-2019 19:00An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.CVE-2018-1283apache software foundationapache http server+119.74%8y ago26-03-2018 15:00In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

All vulnerabilities inethereal mandrake_linux enterprise_linux linux_advanced_workstation

CVE-2004-0633: ethereal_group ethereal

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References