CVE-2004-0176
Ethereal 0.8.13-0.10.2 - Multiple Buffer Overflow in NetFlow, IGAP, EIGRP, PGM, IrDA, BGP, ISUP, and TCAP Dissectors
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-0176. PoCs published by Abhisek Datta, Rémi Denis-Courmont.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Ethereal's IGAP dissector (CVE-2004-0176). It uses a shellcode splitting technique to bypass memory constraints and achieves remote code execution by binding a shell to port 31337.
Description
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Ethereal's IGAP dissector (CVE-2004-0176). It uses a shellcode splitting technique to bypass memory constraints and achieves remote code execution by binding a shell to port 31337.
This PoC exploits a buffer overflow in Ethereal's EIGRP dissector by sending a malformed packet with an overly long IP address field, causing a denial of service. The code constructs a raw socket packet with an invalid TLV length to trigger the vulnerability.