CVE-2004-0634: Ethereal Group Ethereal

Medium severity, CVSS 5.0. EPSS: 5.3% chance of exploitation in the next 30 days.

The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.

Affected products

• Ethereal Group Ethereal: version 0.9.15 only; version 0.10.4 only
• Gentoo Linux: any version
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only

Published 2004-12-06. Last modified 2026-06-16.