Denial of Service Vulnerability in Ethereal SIP Handling
CVE-2004-0504

Currently unrated

Key Information:

Vendor

Ethereal Group

Status
Ethereal
Propack
Vendor
CVE Published:
18 August 2004

What is CVE-2004-0504?

Ethereal version 0.10.3 is susceptible to a denial of service vulnerability that can be exploited by remote attackers through specially crafted SIP (Session Initiation Protocol) messages. This can lead to an application crash, disrupting network analysis activities. Users of Ethereal are advised to upgrade to a secure version to mitigate potential exploitation via SIP communications, particularly in environments that utilize Hotsip servers.

References

http://secunia.com/advisories/11776
third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio...
vendor-advisoryx_refsource_CONECTIVA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2004-0504 : Denial of Service Vulnerability in Ethereal SIP Handling