PT-2006-4503 · Wireshark+1 · Wireshark+1

Ilja Van Sprundel · Publicado 2006-07-18 · Atualizado 2018-10-18 · CVE-2006-3630

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.9.7 through 0.99.0

Description The issue involves multiple off-by-one errors in the NCP NMAS and NDPS dissectors, which have unknown impact and can be exploited via remote attack vectors.

Recommendations For Wireshark versions 0.9.7 through 0.99.0, consider disabling the NCP NMAS and NDPS dissectors as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2006-3630

DSA-1127

RHSA-2006:0602

RHSA-2006_0602

Produtos afetados

Red Hat

Wireshark

Referências · 38

• https://access.redhat.com/security/cve/CVE-2006-3627 · Nota
• http://secunia.com/advisories/21488 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2006-3630 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3629 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm · Nota
• http://secunia.com/advisories/21121 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27827 · Nota
• https://access.redhat.com/security/cve/CVE-2006-3632 · Nota
• http://secunia.com/advisories/21598 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/2850 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3631 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3630 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-200607-09.xml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11350 · Nota
• https://access.redhat.com/security/cve/CVE-2006-3628 · Nota