CVE-2006-1939: Medium severity Ethereal Group Ethereal vulnerability
Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) an invalid display filter, or the (2) GSM SMS, (3) ASN.1-based, (4) DCERPC NT, (5) PER, (6) RPC, (7) DCERPC, and (8) ASN.1 dissectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1939?
CVE-2006-1939 is classified as a vulnerability that can lead to denial of service due to a crash from null dereference.
How do I fix CVE-2006-1939?
Fixing CVE-2006-1939 involves upgrading Ethereal to a version that does not have the specified vulnerabilities, ideally to the latest version available.
Which versions of Ethereal are affected by CVE-2006-1939?
CVE-2006-1939 affects multiple versions of Ethereal from 0.9.x up to and including 0.10.14.
What types of attacks are associated with CVE-2006-1939?
CVE-2006-1939 can be exploited through various attacks involving an invalid display filter and specific dissectors.
What is Ethereal and why is CVE-2006-1939 important?
Ethereal is a network protocol analyzer, and CVE-2006-1939 is important because it allows remote attackers to disrupt network analysis capabilities.