Ethereal-dev: Re: [Ethereal-dev] ethereal radius dissector vulnerability

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Mon, 22 Mar 2004 09:58:33 -0600
Jonathan Heusser wrote:
> Hello,
> 
> during an audit I found a vulnerability in the radius dissector of
> ethereal version 0.10.2
> (and probably prior to aswell).
> This bug allows a remote attacker to cause at least a denial of service
> attack. The execution of
> arbitrary code could be possible..

Thanks.  A change that should fix this has been checked in, although I
don't have any invalid RADIUS captures to test against.