CVE-2004-0365 - CVE House

Status published High CVE-2004-0365

The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2...

7.5 CVSS

Vulnerability Description

The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0365

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from ethereal

View All →

CVE-2003-1013

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows...

High 7.5

CVE-2003-0356

Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote...

Critical 9.8

CVE-2002-0401

SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers...

High 7.5

Affected Vendor

ethereal

View all reports →

Affected Software

ethereal

Vulnerable Versions:

0.8.13

Timeline

Official Publish: March 25th, 2004

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.