CVE-2002-1356

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.ethereal.com/appnotes/enpa-sa-00007.htmlPatch, Vendor Advisory, URL Repurposed
http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13URL Repurposed
http://www.redhat.com/support/errata/RHSA-2002-290.htmlPatch, Vendor Advisory
http://www.ethereal.com/appnotes/enpa-sa-00007.htmlPatch, Vendor Advisory, URL Repurposed
http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13URL Repurposed
http://www.redhat.com/support/errata/RHSA-2002-290.htmlPatch, Vendor Advisory

Timeline

Published: Dec 23, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-135710.0Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote a CVE-2002-135810.0Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a d CVE-2002-135910.0Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial o CVE-2002-136010.0Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a lengt CVE-2002-136110.0overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary c CVE-2002-13625.0mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator CVE-2002-13637.5Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to caus CVE-2002-13647.2Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.CVE-2002-13657.5Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local a CVE-2002-13666.2Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via fi CVE-2002-136710.0Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP pa CVE-2002-13687.5Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute a