National Cyber Awareness System

Vulnerability Summary for CVE-2006-1934

Overview

Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) ALCAP dissector, (2) Network Instruments file code, or (3) NetXray/Windows Sniffer file code.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.ethereal.com/appnotes/enpa-sa-00023.html

Type: Patch Information

Hyperlink:http://www.ethereal.com/appnotes/enpa-sa-00023.html

External Source: VUPEN

Name: ADV-2006-1501

Hyperlink:http://www.vupen.com/english/advisories/2006/1501

External Source: OVAL

Name: oval:org.mitre.oval:def:10445

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10445

External Source: XF

Name: ethereal-netxwin-sniffer-bo(26027)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26027

External Source: XF

Name: ethereal-net-instr-bo(26026)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26026

External Source: XF

Name: ethereal-alcap-dissector-bo(26014)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26014

External Source: BID

Name: 17682

Hyperlink:http://www.securityfocus.com/bid/17682

External Source: REDHAT

Name: RHSA-2006:0420

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0420.html

External Source: FEDORA

Name: FEDORA-2006-461

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html

External Source: FEDORA

Name: FEDORA-2006-456

Hyperlink:http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html

External Source: MANDRIVA

Name: MDKSA-2006:077

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:077

External Source: GENTOO

Name: GLSA-200604-17

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml

External Source: DEBIAN

Name: DSA-1049

Hyperlink:http://www.debian.org/security/2006/dsa-1049

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm

External Source: SECTRACK

Name: 1015985

Hyperlink:http://securitytracker.com/id?1015985

External Source: SECUNIA

Name: 20944

Hyperlink:http://secunia.com/advisories/20944

External Source: SECUNIA

Name: 20210

Hyperlink:http://secunia.com/advisories/20210

External Source: SECUNIA

Name: 20117

Hyperlink:http://secunia.com/advisories/20117

External Source: SECUNIA

Name: 19962

Hyperlink:http://secunia.com/advisories/19962

External Source: SECUNIA

Name: 19958

Hyperlink:http://secunia.com/advisories/19958

External Source: SECUNIA

Name: 19839

Hyperlink:http://secunia.com/advisories/19839

External Source: SECUNIA

Name: 19828

Hyperlink:http://secunia.com/advisories/19828

External Source: SECUNIA

Name: 19805

Hyperlink:http://secunia.com/advisories/19805

External Source: SECUNIA

Name: 19769

Hyperlink:http://secunia.com/advisories/19769

External Source: SUSE

Name: SUSE-SR:2006:010

Hyperlink:http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html

External Source: SGI

Name: 20060501-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc

References to Check Content

Identifier:oval:org.mitre.oval:def:10445

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10445