CVE-2004-0506: Null Pointer Dereference
Published Jun 3, 2004
·Updated
The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.
Affected Software
5 affected components
Ethereal Group Ethereal=0.10.1
Ethereal Group Ethereal=0.10.2
Ethereal Group Ethereal=0.10.3
SGI ProPack=2.4
SGI ProPack=3.0
Remediation
Patch Available
Patch Available
Event History
Jun 3, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0506?
CVE-2004-0506 is classified as a denial of service vulnerability that can crash the Ethereal application.
2
How does CVE-2004-0506 affect Ethereal?
CVE-2004-0506 allows remote attackers to exploit a null pointer dereference in the SPNEGO dissector, resulting in application crashes.
3
Which versions of Ethereal are affected by CVE-2004-0506?
Ethereal versions 0.9.8 to 0.10.3 are impacted by CVE-2004-0506.
4
How can I fix CVE-2004-0506?
To mitigate CVE-2004-0506, upgrade Ethereal to a version beyond 0.10.3.
5
What is the impact of exploiting CVE-2004-0506?
Exploiting CVE-2004-0506 leads to a denial of service, causing the Ethereal application to crash, disrupting network analysis capabilities.