Unrated severityNVD Advisory· Published Aug 10, 2005· Updated Jun 16, 2026
CVE-2005-2367
CVE-2005-2367
Description
Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
26cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*+ 25 more
- cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.10:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.11:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.8:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.10.9:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*
- cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*
- (no CPE)range: 0.9.4 <= x <= 0.10.11
Patches
Vulnerability mechanics
References
13- www.ethereal.com/appnotes/enpa-sa-00020.htmlnvdPatchURL Repurposed
- www.gentoo.org/security/en/glsa/glsa-200507-27.xmlnvdPatch
- www.mandriva.com/security/advisoriesnvdPatchVendor Advisory
- www.idefense.com/application/poi/displaynvdVendor Advisory
- secunia.com/advisories/16225/nvd
- secunia.com/advisories/17102nvd
- www.debian.org/security/2005/dsa-853nvd
- www.novell.com/linux/security/advisories/2005_18_sr.htmlnvd
- www.novell.com/linux/security/advisories/2005_19_sr.htmlnvd
- www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.htmlnvd
- www.redhat.com/support/errata/RHSA-2005-687.htmlnvd
- www.securityfocus.com/bid/14399nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10765nvd
News mentions
0No linked articles in our index yet.