First published: Thu Aug 24 2006(Updated: )
Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Wireshark Wireshark | =0.99.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-4331 has a severity level classified as medium due to its potential to cause a denial of service.
To fix CVE-2006-4331, upgrade to a later version of Wireshark that addresses this vulnerability.
CVE-2006-4331 specifically affects Wireshark version 0.99.2.
CVE-2006-4331 is characterized as an off-by-one error vulnerability within the IPSec ESP preference parser.
Attackers can exploit CVE-2006-4331 to crash the application, resulting in a denial of service.