Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.
Wireshark logo

Ethereal-dev: Re: [Ethereal-dev] ethereal radius dissector vulnerability

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Mon, 22 Mar 2004 09:58:33 -0600
Jonathan Heusser wrote:
> Hello,
> 
> during an audit I found a vulnerability in the radius dissector of
> ethereal version 0.10.2
> (and probably prior to aswell).
> This bug allows a remote attacker to cause at least a denial of service
> attack. The execution of
> arbitrary code could be possible..

Thanks.  A change that should fix this has been checked in, although I
don't have any invalid RADIUS captures to test against.
Wireshark logo footer

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube