> --- > > Title : Ethereal remote buffer overflow > Advisory ID : LSS-2005-03-04 > Date : 08.03.2005 > Advisory URL: : http://security.lss.hr/en/index.php?page=exp > Impact : Stack overflow and possible code execution > Risk level : High > Vulnerability type : Remote > Vendors contacted : Yes > > --- This vulnerability was first discovered by me, on 01/Mar/2005. The vendor was immediatelly contacted, as you can see below: http://marc.theaimsgroup.com/?l=ethereal-dev&m=110973103628823&w=2 http://marc.theaimsgroup.com/?l=ethereal-dev&m=110973731214683&w=2 This vulnerability wouldn't made public until the next Ethereal's version comes out (hopefully 10 or 11 this month), as I dealed with the vendor. A proof-of-concept remote root exploit was made by me, but will only be publicized on schedule. Diego Giagio
