PT-2006-2918 · Ethereal · Ethereal

Gerald Combs · Published 2006-04-25 · Updated 2024-02-14 · CVE-2006-1934

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.10.x up to 0.10.14

Description The issue is related to multiple buffer overflows that can be triggered remotely, potentially allowing attackers to cause a denial of service (crash) and possibly execute arbitrary code. This is achieved through the ALCAP dissector, Network Instruments file code, or NetXray/Windows Sniffer file code.

Recommendations For Ethereal versions 0.10.x up to 0.10.14, consider updating to a version that is not affected by these buffer overflows. As a temporary workaround, restrict the use of the ALCAP dissector, Network Instruments file code, and NetXray/Windows Sniffer file code to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-1934

DSA-1049-1

RHSA-2006:0420

Affected Products

Ethereal

References · 27

• http://ethereal.com/appnotes/enpa-sa-00023.html · Patch
• http://redhat.com/archives/fedora-announce-list/2006-April/msg00195.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200604-17.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1934 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2006:077 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0420.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1049 · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html · Vendor Advisory
• http://redhat.com/archives/fedora-announce-list/2006-April/msg00194.html · Vendor Advisory
• http://secunia.com/advisories/19828 · Note
• http://securityfocus.com/bid/17682 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26027 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26026 · Note
• http://securitytracker.com/id?1015985 · Note