CVE-2005-2367

Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.

Published: Aug 10, 2005
Updated: Nov 9, 2025
CVE: CVE-2005-2367
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
ethereal_group / ethereal	0.10.1	0.10.1.x
ethereal_group / ethereal	0.9.6	0.9.6.x
ethereal_group / ethereal	0.10.10	0.10.10.x
ethereal_group / ethereal	0.9.5	0.9.5.x
ethereal_group / ethereal	0.10.2	0.10.2.x
ethereal_group / ethereal	0.9.14	0.9.14.x
ethereal_group / ethereal	0.9.15	0.9.15.x
ethereal_group / ethereal	0.9.10	0.9.10.x
ethereal_group / ethereal	0.9.8	0.9.8.x
ethereal_group / ethereal	0.10.3	0.10.3.x
ethereal_group / ethereal	0.10.4	0.10.4.x
ethereal_group / ethereal	0.10.7	0.10.7.x
ethereal_group / ethereal	0.9.16	0.9.16.x
ethereal_group / ethereal	0.10.11	0.10.11.x
ethereal_group / ethereal	0.10.5	0.10.5.x
ethereal_group / ethereal	0.10.0	0.10.0.x
ethereal_group / ethereal	0.9.13	0.9.13.x
ethereal_group / ethereal	0.9.9	0.9.9.x
ethereal_group / ethereal	0.9.11	0.9.11.x
ethereal_group / ethereal	0.9.7	0.9.7.x
ethereal_group / ethereal	0.9.4	0.9.4.x
ethereal_group / ethereal	0.10.6	0.10.6.x
ethereal_group / ethereal	0.10.8	0.10.8.x
ethereal_group / ethereal	0.10.9	0.10.9.x
ethereal_group / ethereal	0.9.12	0.9.12.x

Vulnerability Database

309,961

CVE-2005-2367

Deep Security Visibility Without the Complexity