CVE-2004-0635: Ethereal Group Ethereal

Medium severity, CVSS 5.0. EPSS: 5.3% chance of exploitation in the next 30 days.

The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.

Affected products

• Ethereal Group Ethereal: version 0.8.15 only; version 0.8.16 only; version 0.8.17 only; version 0.8.18 only; version 0.8.19 only; version 0.9 only; …
• Gentoo Linux: any version
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only

Published 2004-12-06. Last modified 2026-06-16.