CVE-2005-3245: Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown...

Security readout for executives and security teams

This issue affects old Ethereal packet analyzer versions. If a specific ONC RPC dissection option is enabled, crafted or unusual RPC traffic can make Ethereal consume excessive memory, causing a denial of service. The cited record does not indicate code execution or active exploitation. Exposure is most likely on systems still running Ethereal 0.10.3 to 0.10.12, especially analysts or monitoring systems processing untrusted network traffic or packet captures with the affected option enabled. Treat this as a targeted legacy-tool availability risk. It is not presented as business-critical without affected Ethereal deployments, but security teams should remove or update old packet-analysis tooling. Mitigation focus: Identify any Ethereal 0.10.3 through 0.10.12 installations.; Check vendor advisories for supported update packages or replacement guidance.; Disable “Dissect unknown RPC program numbers” where operationally acceptable..

Prepared

Jun 29, 2026, 17:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.