Unrated severityNVD Advisory· Published Dec 6, 2004· Updated Apr 16, 2026
CVE-2004-0635
CVE-2004-0635
Description
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.
Affected products
37cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*+ 26 more
- cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.8.17:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*
- cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:as:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
14- www.gentoo.org/security/en/glsa/glsa-200407-08.xmlnvdPatchVendor Advisory
- www.mandrakesecure.net/en/advisories/advisory.phpnvdPatchVendor Advisory
- www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.htmlnvdPatchVendor Advisory
- www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.htmlnvdPatchVendor Advisory
- www.ethereal.com/appnotes/enpa-sa-00015.htmlnvdURL Repurposed
- www.kb.cert.org/vuls/id/835846nvdUS Government Resource
- bugzilla.redhat.com/bugzilla/show_bug.cginvd
- distro.conectiva.com.br/atualizacoes/nvd
- secunia.com/advisories/12024nvd
- securitytracker.com/idnvd
- www.debian.org/security/2004/dsa-528nvd
- www.redhat.com/support/errata/RHSA-2004-378.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/16632nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9721nvd
News mentions
0No linked articles in our index yet.