PT-2006-4501 · Wireshark+1 · Wireshark+1

Published 2006-07-18 · Updated 2018-10-18 · CVE-2006-3628

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.10.x through 0.99.0

Description The issue concerns multiple format string vulnerabilities that could allow remote attackers to cause a denial of service and possibly execute arbitrary code. This is achieved through various dissectors, including (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP.

Recommendations For Wireshark versions 0.10.x through 0.99.0, update to a version that contains a fix for this issue to prevent potential exploitation.

Fix

DoS

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2006-3628

DSA-1127

RHSA-2006:0602

RHSA-2006_0602

Affected Products

Red Hat

Wireshark

References · 43

• http://secunia.com/advisories/21488 · Vendor Advisory
• http://secunia.com/advisories/21121 · Vendor Advisory
• http://secunia.com/advisories/21598 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2850 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-3628 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200607-09.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:128 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3628 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P · Vendor Advisory
• http://secunia.com/advisories/21078 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-3628 · Vendor Advisory
• http://secunia.com/advisories/21107 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0602.html · Vendor Advisory
• http://wireshark.org/security/wnpa-sec-2006-01.html · Patch
• http://debian.org/security/2006/dsa-1127 · Vendor Advisory