CVE-2004-0634

MEDIUM 5.0CVE-2004-0634 · Published 06/12/2004 · updated 16/06/2026

In short

CVE-2004-0634 is a MEDIUM (CVSS 5.0) vulnerability affecting ethereal (ethereal group).
Chance of exploitation in the next 30 days (EPSS): 5.3%, higher than 92.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ethereal ethereal_group	`= 0.10.4= 0.9.15`	No fix yet

Description

The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.

References

bugzilla.redhat.com/bugzilla/show_bug.cgi
distro.conectiva.com.br/atualizacoes
secunia.com/advisories/12024
securitytracker.com/id
ethereal.com/appnotes/enpa-sa-00015.html · URL Repurposed
gentoo.org/security/en/glsa/glsa-200407-08.xml · Patch
kb.cert.org/vuls/id/518782 · US Government Resource
mandrakesecure.net/en/advisories/advisory.php · Patch
redhat.com/archives/fedora-announce-list/2004-July/msg00013.html · Patch
redhat.com/archives/fedora-announce-list/2004-July/msg00014.html · Patch
redhat.com/support/errata/RHSA-2004-378.html
exchange.xforce.ibmcloud.com/vulnerabilities/16631

More vulnerabilities in ethereal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free