CVE-2006-1938: Medium severity Ethereal Group Ethereal vulnerability
Published Apr 25, 2006
·Updated
Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via the (1) Sniffer capture or (2) SMB PIPE dissector.
Affected Software
53 affected components
Ethereal Group Ethereal=0.8
Ethereal Group Ethereal=0.8.5
Ethereal Group Ethereal=0.8.6
Ethereal Group Ethereal=0.8.7
Ethereal Group Ethereal=0.8.8
Ethereal Group Ethereal=0.8.9
Ethereal Group Ethereal=0.8.10
Ethereal Group Ethereal=0.8.11
Ethereal Group Ethereal=0.8.12
Ethereal Group Ethereal=0.8.13
Ethereal Group Ethereal=0.8.14
Ethereal Group Ethereal=0.8.15
Ethereal Group Ethereal=0.8.16
Ethereal Group Ethereal=0.8.17
Ethereal Group Ethereal=0.8.17a
Ethereal Group Ethereal=0.8.18
Ethereal Group Ethereal=0.8.19
Ethereal Group Ethereal=0.8.20
Ethereal Group Ethereal=0.9
Ethereal Group Ethereal=0.9.0
Ethereal Group Ethereal=0.9.1
Ethereal Group Ethereal=0.9.2
Ethereal Group Ethereal=0.9.3
Ethereal Group Ethereal=0.9.4
Ethereal Group Ethereal=0.9.5
Ethereal Group Ethereal=0.9.6
Ethereal Group Ethereal=0.9.7
Ethereal Group Ethereal=0.9.8
Ethereal Group Ethereal=0.9.9
Ethereal Group Ethereal=0.9.10
Ethereal Group Ethereal=0.9.11
Ethereal Group Ethereal=0.9.12
Ethereal Group Ethereal=0.9.13
Ethereal Group Ethereal=0.9.14
Ethereal Group Ethereal=0.9.15
Ethereal Group Ethereal=0.9.16
Ethereal Group Ethereal=0.9_.0
Ethereal Group Ethereal=0.10
Ethereal Group Ethereal=0.10.0
Ethereal Group Ethereal=0.10.0a
Ethereal Group Ethereal=0.10.1
Ethereal Group Ethereal=0.10.2
Ethereal Group Ethereal=0.10.3
Ethereal Group Ethereal=0.10.4
Ethereal Group Ethereal=0.10.5
Ethereal Group Ethereal=0.10.6
Ethereal Group Ethereal=0.10.7
Ethereal Group Ethereal=0.10.8
Ethereal Group Ethereal=0.10.9
Ethereal Group Ethereal=0.10.10
Ethereal Group Ethereal=0.10.11
Ethereal Group Ethereal=0.10.12
Ethereal Group Ethereal=0.10.13
Remediation
Patch Available
Event History
Apr 25, 2006
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1938?
CVE-2006-1938 is rated as a denial of service vulnerability.
2
How do I fix CVE-2006-1938?
To fix CVE-2006-1938, users should upgrade to a version of Ethereal that is not affected, specifically above version 0.10.14.
3
What products are affected by CVE-2006-1938?
CVE-2006-1938 affects multiple versions of Ethereal from 0.8.x up to 0.10.14.
4
What causes the vulnerability in CVE-2006-1938?
CVE-2006-1938 is caused by multiple unspecified vulnerabilities leading to a crash from null dereference.
5
Can CVE-2006-1938 be exploited remotely?
Yes, CVE-2006-1938 can be exploited by remote attackers to cause a denial of service.