PT-2006-2918 · Ethereal · Ethereal

·

CVE-2006-1934

·

Publicado

2006-04-25

·

Atualizado

2024-02-14

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Ethereal versions 0.10.x up to 0.10.14
Description The issue is related to multiple buffer overflows that can be triggered remotely, potentially allowing attackers to cause a denial of service (crash) and possibly execute arbitrary code. This is achieved through the ALCAP dissector, Network Instruments file code, or NetXray/Windows Sniffer file code.
Recommendations For Ethereal versions 0.10.x up to 0.10.14, consider updating to a version that is not affected by these buffer overflows. As a temporary workaround, restrict the use of the ALCAP dissector, Network Instruments file code, and NetXray/Windows Sniffer file code to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2006-1934
DSA-1049-1
RHSA-2006:0420

Produtos afetados

Ethereal