CVE-2006-1934

Published: Apr 25, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) ALCAP dissector, (2) Network Instruments file code, or (3) NetXray/Windows Sniffer file code.

Affected (16)

Products: Ethereal Group: Ethereal

Ethereal Group

1 product

Ethereal

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Ethereal Group Ethereal	Version 0.10.0
Ethereal Group Ethereal	Version 0.10.0a
Ethereal Group Ethereal	Version 0.10.10
Ethereal Group Ethereal	Version 0.10.11
Ethereal Group Ethereal	Version 0.10.12
Ethereal Group Ethereal	Version 0.10.13
Ethereal Group Ethereal	Version 0.10.1
Ethereal Group Ethereal	Version 0.10.2
Ethereal Group Ethereal	Version 0.10.3
Ethereal Group Ethereal	Version 0.10.4
Ethereal Group Ethereal	Version 0.10.5
Ethereal Group Ethereal	Version 0.10.6
Ethereal Group Ethereal	Version 0.10.7
Ethereal Group Ethereal	Version 0.10.8
Ethereal Group Ethereal	Version 0.10.9
Ethereal Group Ethereal	Version 0.10

References (52)

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc (unsafe URL)

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html

Source: secalert@redhat.com

http://secunia.com/advisories/19769

Source: secalert@redhat.com

http://secunia.com/advisories/19805

Source: secalert@redhat.com

http://secunia.com/advisories/19828

Source: secalert@redhat.com

http://secunia.com/advisories/19839

Source: secalert@redhat.com

http://secunia.com/advisories/19958

Source: secalert@redhat.com

http://secunia.com/advisories/19962

Source: secalert@redhat.com

http://secunia.com/advisories/20117

Source: secalert@redhat.com

http://secunia.com/advisories/20210

Source: secalert@redhat.com

http://secunia.com/advisories/20944

Source: secalert@redhat.com

http://securitytracker.com/id?1015985

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1049

Source: secalert@redhat.com

http://www.ethereal.com/appnotes/enpa-sa-00023.html

Source: secalert@redhat.com

PatchURL Repurposed

http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:077

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0420.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17682

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/1501

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/26014

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/26026

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/26027

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10445

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc (unsafe URL)