CVE-2005-2367

Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11...

7.5 HighPublic exploit

Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.

Exploit likelihood

6.14%Down 6.4 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2005-2367
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-2367
Updated: 2026-11-02

EUVDEUVD-2005-2368 No score

Record: EUVD-2005-2368
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jq42-836h-c5wg No score

Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11...

Record: GHSA-jq42-836h-c5wg
Updated: 2026-11-02

Affected products

ethereal group ethereal

Affected packages

Affected packages
Package	Affected	Fixed
`ethereal` Debian:3.0 From an advisory covering 7 CVEs	before 0.9.4-1woody13, plus listed versions 0.9.4-1woody110.9.4-1woody120.9.4-1woody9	0.9.4-1woody13
`ethereal` Debian:3.1 From an advisory covering 7 CVEs	before 0.10.10-2sarge3, plus listed versions 0.10.10-2sarge2	0.10.10-2sarge3
`ethereal` Red Hat:enterprise_linux:3::as From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal-debuginfo` Red Hat:enterprise_linux:3::as From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal-gnome` Red Hat:enterprise_linux:3::as From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal` Red Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal-debuginfo` Red Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal-gnome` Red Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal` Red Hat:enterprise_linux:3::es From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal-debuginfo` Red Hat:enterprise_linux:3::es From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1

Show 4 moreShow less

Affected packages
Package	Affected	Fixed
`ethereal-gnome` Red Hat:enterprise_linux:3::es From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal` Red Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal-debuginfo` Red Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1
`ethereal-gnome` Red Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs	before 0:0.10.12-1.EL3.1	0:0.10.12-1.EL3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Ethereal 10.x - AFP Protocol Dissector Remote Format String	2005-08-06

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2367 is a high vulnerability (CVSS 7.5) in Ethereal Group Ethereal, published August 10, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.14%, the 93rd percentile. No source names a fixed version.

References

Show 45 moreShow less