CVE-2004-0176
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial...
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
Exploit likelihood
What each source reports
NVD Score used
5.0
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
- Record
CVE-2004-0176- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
- Record
CVE-2004-0176- Updated
- 2026-11-02
EUVDEUVD-2004-0176 No score
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
- Record
EUVD-2004-0176- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rfxc-wgf7-qphr No score
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial...
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
- Record
GHSA-rfxc-wgf7-qphr- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
etherealDebian:3.0 |
before 0.9.4-1woody7 | 0.9.4-1woody7 |
etherealRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:0.10.3-0.30E.1 | 0:0.10.3-0.30E.1 |
ethereal-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:0.10.3-0.30E.1 | 0:0.10.3-0.30E.1 |
etherealRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:0.10.3-0.30E.1 | 0:0.10.3-0.30E.1 |
ethereal-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:0.10.3-0.30E.1 | 0:0.10.3-0.30E.1 |
etherealRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:0.10.3-0.30E.1 | 0:0.10.3-0.30E.1 |
ethereal-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:0.10.3-0.30E.1 | 0:0.10.3-0.30E.1 |
etherealRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:0.10.3-0.30E.1 | 0:0.10.3-0.30E.1 |
ethereal-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:0.10.3-0.30E.1 | 0:0.10.3-0.30E.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ethereal - EIGRP Dissector TLV_IP_INT Long IP Remote Denial of Service | 2004-03-26 |
| Exploit-DB | Ethereal 0.10.0 < 0.10.2 - IGAP Overflow | 2004-03-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0176 is a medium vulnerability (CVSS 5.0) in Ethereal Group Ethereal, published March 25, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 67.1%, the 99th percentile. Fixed in ethereal 0.9.4-1woody7.
References
kb.cert.org/vuls/id/659140
security.gentoo.org/glsa/glsa-200403-07.xml
redhat.com/support/errata/RHSA-2004-137.html
debian.org/security/2004/dsa-511
redhat.com/support/errata/RHSA-2004-136.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10187
Show 41 moreShow less
secunia.com/advisories/11185
marc.info?l=bugtraq&m=108058005324316&w=2
security.e-matters.de/advisories/032004.html
osvdb.org/6893
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000835
marc.info?l=bugtraq&m=108007072215742&w=2
kb.cert.org/vuls/id/864884
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A887
kb.cert.org/vuls/id/119876
kb.cert.org/vuls/id/433596
kb.cert.org/vuls/id/591820
ethereal.com/appnotes/enpa-sa-00013.html
kb.cert.org/vuls/id/644886
exchange.xforce.ibmcloud.com/vulnerabilities/15569
kb.cert.org/vuls/id/740188
kb.cert.org/vuls/id/125156
marc.info?l=bugtraq&m=108213710306260&w=2
kb.cert.org/vuls/id/931588
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A878
mandriva.com/security/advisories?name=MDKSA-2004:024
nvd.nist.gov/vuln/detail/CVE-2004-0176
github.com/advisories/GHSA-rfxc-wgf7-qphr
access.redhat.com/errata/RHSA-2004:136
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=118143
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_136.json
access.redhat.com/security/cve/CVE-2004-0176
bugzilla.redhat.com/show_bug.cgi?id=1617167
cve.org/CVERecord?id=CVE-2004-0176
access.redhat.com/security/cve/CVE-2004-0365
bugzilla.redhat.com/show_bug.cgi?id=1617185
cve.org/CVERecord?id=CVE-2004-0365
nvd.nist.gov/vuln/detail/CVE-2004-0365
access.redhat.com/security/cve/CVE-2004-0367
bugzilla.redhat.com/show_bug.cgi?id=1617186
cve.org/CVERecord?id=CVE-2004-0367
nvd.nist.gov/vuln/detail/CVE-2004-0367
access.redhat.com/security/cve/CVE-2004-1761
bugzilla.redhat.com/show_bug.cgi?id=1617416
cve.org/CVERecord?id=CVE-2004-1761
nvd.nist.gov/vuln/detail/CVE-2004-1761