Description
Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | ethereal +1 | 0.10.10-1.EL3.1 | RHSA-2005:306 |
Advisories 1
- RHSA-2005:306 Red Hat Security Advisory: ethereal security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- GLSA-200503-16 vendor-advisory
- MDKSA-2005:053 vendor-advisory
- http://www.ethereal.com/appnotes/enpa-sa-00018.html
- oval:org.mitre.oval:def:10147 vdb-entry signature
- 12759 vdb-entry
- RHSA-2005:306 vendor-advisory
- http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-03-04
- 20050314 Ethereal 0.10.9 and below remote root exploit mailing-list
- 20050309 RE: Ethereal remote buffer overflow - addon mailing-list
- 20050308 Ethereal remote buffer overflow mailing-list
- FLSA-2006:152922 vendor-advisory