CVE-2006-1940

Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service abort via the SNDCP dissector...

CVE-2006-1936

Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the telnet dissector...

CVE-2006-1936

CVE-2006-1936 affects Ethereal 0.8.5–0.10.14; telnet dissector contains a buffer overflow, enabling remote arbitrary code execution. Remediation noted in connected records: upgrade Ethereal to non‑vulnerable versions (e.g., CentOS/Red Hat advisories specify upgrading to version 0.99.0 or newer).

CVE-2006-1935

Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the COPS dissector...

CVE-2006-1940: Undefined Security Weakness

Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service abort via the SNDCP dissector...

CVE-2006-1933: Undefined Security Weakness

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service large or infinite loops viarafted packets to the 1 UMA and 2 BER dissectors...

CVE-2006-1934: Undefined Security Weakness

Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via the 1 ALCAP dissector, 2 Network Instruments file code, or 3 NetXray/Windows Sniffer file code...

CVE-2006-1935: Undefined Security Weakness

Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the COPS dissector...

CVE-2006-1938: Undefined Security Weakness

Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via the 1 Sniffer capture or 2 SMB PIPE dissector...

PT-2006-2924 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.4 through 0.10.14 Description: The issue allows remote attackers to cause a denial of service, resulting in the application aborting, via the SNDCP dissector. Recommendations: For versions 0.10.4 through 0.10.14, consid...

PT-2006-2921 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.x up to 0.10.14 Description: The issue affects multiple components, including H.248, X.509if, SRVLOC, H.245, AIM, and general packet dissectors, as well as the statistics counter. Remote attackers can cause a denial of...

PT-2006-2918 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.x up to 0.10.14 Description: The issue is related to multiple buffer overflows that can be triggered remotely, potentially allowing attackers to cause a denial of service crash and possibly execute arbitrary code. This ...

PT-2006-2922 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.x through 0.10.14 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash due to a null dereference. This can be achieved via the Sniffer capture or the SMB PIPE dissector...

PT-2006-2920 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.5 through 0.10.14 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via the telnet dissector. Recommendations: For Ethereal versions 0.8.5 through 0.10.14, update to a version that...

PT-2006-2919 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.15 through 0.10.14 Description: The issue is related to a buffer overflow that can be triggered via the COPS dissector, allowing remote attackers to cause a denial of service, potentially leading to a crash, and possibly...

CVE-2006-1936: Undefined Security Weakness

Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the telnet dissector...

ethereal -- Multiple Protocol Dissector Vulnerabilities

Secunia reports: Multiple vulnerabilities have been reported in Ethereal, which can be exploited by malicious people to cause a DoS Denial of Service or compromise a vulnerable system. The vulnerabilities are caused due to various types of errors including boundary errors, an off-by-one error, an...

Mandrake Linux Security Advisory : ethereal (MDKSA-2005:227)

A stack-based buffer overflow was discovered in the OSPF dissector in Ethereal. This could potentially be abused to allow remote attackers to execute arbitrary code via crafted packets. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network Security,...

security flaw

The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service infinite loop...

CVE-2005-4585

CVE-2005-4585 affects Ethereal (packet analyzer) GTP dissector, with versions 0.9.1 through 0.10.13 affected. The vulnerability allows remote attackers to cause a denial of service via an infinite loop when processing crafted traffic. Public advisories from Red Hat/CentOS update Ethereal to versi...