Bugtraq mailing list archives
Re: Ethereal remote buffer overflow
From: Diego Giagio <dgiagio () irion com br>
Date: Tue, 8 Mar 2005 23:35:01 -0300
--- Title : Ethereal remote buffer overflow Advisory ID : LSS-2005-03-04 Date : 08.03.2005 Advisory URL: : http://security.lss.hr/en/index.php?page=exp Impact : Stack overflow and possible code execution Risk level : High Vulnerability type : Remote Vendors contacted : Yes ---
This vulnerability was first discovered by me, on 01/Mar/2005. The vendor was immediatelly contacted, as you can see below: http://marc.theaimsgroup.com/?l=ethereal-dev&m=110973103628823&w=2 http://marc.theaimsgroup.com/?l=ethereal-dev&m=110973731214683&w=2 This vulnerability wouldn't made public until the next Ethereal's version comes out (hopefully 10 or 11 this month), as I dealed with the vendor. A proof-of-concept remote root exploit was made by me, but will only be publicized on schedule. Diego Giagio
Current thread:
- Ethereal remote buffer overflow LSS Security (Mar 08)
- Re: Ethereal remote buffer overflow Gerald Combs (Mar 09)
- Re: Ethereal remote buffer overflow Diego Giagio (Mar 09)