CVE-2004-0634
Fixed in a distro release EPSS 5%
The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.
Products: ethereal_group ethereal, gentoo linux, mandrakesoft mandrake_linux, redhat enterprise_linux, redhat linux_advanced_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | ethereal | 0:0.10.5-0.30E.2 |
| Red Hat Enterprise Linux 3 | ethereal-debuginfo | 0:0.10.5-0.30E.2 |
| Red Hat Enterprise Linux 3 | ethereal-gnome | 0:0.10.5-0.30E.2 |