CVE-2006-1937

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via 1 multiple vectors in H.248, and the 2 X.509if, 3 SRVLOC, 4 H.245, 5 AIM, and 6 general packet dissectors; and 7 the statistics counter...

CVE-2006-1940

Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service abort via the SNDCP dissector...

CVE-2006-1932

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

CVE-2006-1934

Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via the 1 ALCAP dissector, 2 Network Instruments file code, or 3 NetXray/Windows Sniffer file code...

CVE-2006-1936

CVE-2006-1936 affects Ethereal 0.8.5–0.10.14; telnet dissector contains a buffer overflow, enabling remote arbitrary code execution. Remediation noted in connected records: upgrade Ethereal to non‑vulnerable versions (e.g., CentOS/Red Hat advisories specify upgrading to version 0.99.0 or newer).

CVE-2006-1936

Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the telnet dissector...

CVE-2006-1938

CVE-2006-1938 affects Ethereal (0.8.x up to 0.10.14) with a NULL pointer dereference in the SMB PIPE dissector and when reading a malformed Sniffer capture, potentially causing a crash. Connected advisories corroborate multiple related issues in Ethereal’s protocol dissectors and note remediation...

CVE-2006-1932

CVE-2006-1932 (and related CVEs 1933–1940) affect Ethereal up to version 0.10.14, via multiple dissectors and the OID printing routine, causing off-by-one errors, infinite loops, buffer overruns, crashes or aborts. Public advisories (Debian DSA-1049-1, RHSA-2006:0420, Gentoo GLSA 200604-17, OpenV...

CVE-2006-1934

CVE-2006-1934 is an ETHereal (Wireshark) vulnerability affecting the 0.10.x line up to 0.10.14. The issue is a buffer overrun in the Network Instruments file code (one of several dissectors), which could allow a remote attacker to crash the application and, potentially, execute arbitrary code. Pu...

CVE-2006-1939

Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via 1 an invalid display filter, or the 2 GSM SMS, 3 ASN.1-based, 4 DCERPC NT, 5 PER, 6 RPC, 7 DCERPC, and 8 ASN.1 dissectors...

CVE-2006-1935

Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the COPS dissector...

CVE-2006-1939

CVE-2006-1939 is one of multiple vulnerabilities in Ethereal up to version 0.10.14. The description notes null pointer dereferences in several dissectors (ASN.1, GSM SMS, RPC, and ASN.1-based) and an invalid display filter that could cause a crash. Connected advisories confirm broader issues acro...

CVE-2006-1937

CVE-2006-1937 affects Ethereal 0.10.x up to 0.10.14. Remote attackers could crash Ethereal via the SRVLOC and AIM dissectors and the statistics counter (null dereference) among several non‑specific dissectors (H.248, X.509if, SRVLOC, H.245, AIM, and general packet dissectors). Affected product: E...

CVE-2006-1933

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service large or infinite loops viarafted packets to the 1 UMA and 2 BER dissectors...

CVE-2006-1935

CVE-2006-1935 affects Ethereal up to 0.10.14 via the COPS dissector. The vulnerability is a buffer overflow in the COPS dissector that could allow a remote attacker to crash Ethereal and potentially execute arbitrary code. Public documents (Debian DSAs, RHSA/CentOS advisories, OpenVAS entries) co...

CVE-2006-1938

Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via the 1 Sniffer capture or 2 SMB PIPE dissector...

CVE-2006-1933

CVE-2006-1933 affects Ethereal (0.10.x up to 0.10.14): the UMA and BER dissectors could enter an infinite loop when processing crafted packets. Public advisories (Debian DSA-1049-1; Red Hat RHSA-2006:0420; CentOS/CESA-2006:0420) indicate updated Ethereal packages to fix these issues, with Debian ...

PT-2006-2919 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.15 through 0.10.14 Description: The issue is related to a buffer overflow that can be triggered via the COPS dissector, allowing remote attackers to cause a denial of service, potentially leading to a crash, and possibly...

PT-2006-2917 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.x up to 0.10.14 Description: The issue involves multiple unspecified vulnerabilities that allow remote attackers to cause a denial of service through crafted packets to the 1 UMA and 2 BER dissectors, potentially leadin...

PT-2006-2920 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.5 through 0.10.14 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via the telnet dissector. Recommendations: For Ethereal versions 0.8.5 through 0.10.14, update to a version that...