CVE-2006-1934: Buffer Overflow

Published Apr 25, 2006

Updated

Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) ALCAP dissector, (2) Network Instruments file code, or (3) NetXray/Windows Sniffer file code.

Affected Software

16 affected components

Ethereal Group Ethereal=0.10

Ethereal Group Ethereal=0.10.0

Ethereal Group Ethereal=0.10.0a

Ethereal Group Ethereal=0.10.1

Ethereal Group Ethereal=0.10.2

Ethereal Group Ethereal=0.10.3

Ethereal Group Ethereal=0.10.4

Ethereal Group Ethereal=0.10.5

Ethereal Group Ethereal=0.10.6

Ethereal Group Ethereal=0.10.7

Ethereal Group Ethereal=0.10.8

Ethereal Group Ethereal=0.10.9

Ethereal Group Ethereal=0.10.10

Ethereal Group Ethereal=0.10.11

Ethereal Group Ethereal=0.10.12

Ethereal Group Ethereal=0.10.13

Remediation

Patch Available

http://www.ethereal.com/appnotes/enpa-sa-00023.html

Event History

Apr 25, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1934?

CVE-2006-1934 is classified as a critical vulnerability due to its potential for remote code execution and denial of service.

How do I fix CVE-2006-1934?

To fix CVE-2006-1934, you should upgrade Ethereal to the latest version that addresses these buffer overflow vulnerabilities.

What versions of Ethereal are affected by CVE-2006-1934?

CVE-2006-1934 affects Ethereal versions 0.10.0 through 0.10.14.

What kinds of attacks can exploit CVE-2006-1934?

CVE-2006-1934 can be exploited through specially crafted packets using the ALCAP dissector or other affected file codes.

What are the potential consequences of CVE-2006-1934?

The consequences of CVE-2006-1934 include denial of service and the possibility of remote code execution by an attacker.