CVE ID:	CAN-2005-0739
Description:	The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0739 BugTraq ID: 12762 http://www.securityfocus.com/bid/12762 Bugtraq: 20050312 Ethereal remote buffer overflow #2 (Google Search) http://marc.info/?l=bugtraq&m=111066805726551&w=2 Debian Security Information: DSA-718 (Google Search) http://www.debian.org/security/2005/dsa-718 http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:053 http://anonsvn.ethereal.com/viewcvs/viewcvs.py?view=rev&rev=13707 http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9687 RedHat Security Advisories: RHSA-2005:306 http://www.redhat.com/support/errata/RHSA-2005-306.html