CVE-2006-1937: Medium severity Ethereal Group Ethereal vulnerability

Published Apr 25, 2006

Updated

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) multiple vectors in H.248, and the (2) X.509if, (3) SRVLOC, (4) H.245, (5) AIM, and (6) general packet dissectors; and (7) the statistics counter.

Affected Software

16 affected components

Ethereal Group Ethereal=0.10.1

Ethereal Group Ethereal=0.10.0a

Ethereal Group Ethereal=0.10.10

Ethereal Group Ethereal=0.10.2

Ethereal Group Ethereal=0.10.13

Ethereal Group Ethereal=0.10.3

Ethereal Group Ethereal=0.10.4

Ethereal Group Ethereal=0.10.7

Ethereal Group Ethereal=0.10.12

Ethereal Group Ethereal=0.10.11

Ethereal Group Ethereal=0.10.5

Ethereal Group Ethereal=0.10.0

Ethereal Group Ethereal=0.10

Ethereal Group Ethereal=0.10.6

Ethereal Group Ethereal=0.10.8

Ethereal Group Ethereal=0.10.9

Remediation

Patch Available

http://www.ethereal.com/appnotes/enpa-sa-00023.html

Event History

Apr 25, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1937?

The severity of CVE-2006-1937 is classified as critical due to its potential for causing a denial of service.

How do I fix CVE-2006-1937?

To fix CVE-2006-1937, upgrade Ethereal to version 0.10.15 or later.

What versions of Ethereal are affected by CVE-2006-1937?

Ethereal versions from 0.10.0 to 0.10.14 are affected by CVE-2006-1937.

What types of attacks can exploit CVE-2006-1937?

CVE-2006-1937 can be exploited through remote attacks that trigger crashes via specific packet dissectors.

Is there a patch available for CVE-2006-1937?

Yes, a patch is available through the Ethereal updates that can fix the vulnerabilities associated with CVE-2006-1937.