CVE-2005-0739: ethereal_group ethereal Numeric Errors
Vulnerability summary
CVE-2005-0739 is a medium (CVSS 5.0) Numeric Errors vulnerability in ethereal_group ethereal. EPSS estimates a 7.61% chance of exploitation in the next 30 days, higher than 94.4% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 13-03-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.61%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.61% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundEthereal 0.10.9 (Windows) - '3G-A11' Remote Buffer Overflow
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Debian1 product
- ethereal< 0.9.4-1woody12
Ethereal_group1 product
- ethereal≤ 0.10.9
2 vendors · 2 products
References
11 links- security.lss.hr/index.php?page=details&ID=LSS-2005-03-05X Refsource MISC
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9687VDB EntrySignatureX Refsource OVAL
- www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.htmlVendor AdvisoryX Refsource FEDORA
