CVE-2006-1934

Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via the 1 ALCAP dissector, 2 Network Instruments file code, or 3 NetXray/Windows Sniffer file code...

CVE-2006-1933

CVE-2006-1933 affects Ethereal (0.10.x up to 0.10.14): the UMA and BER dissectors could enter an infinite loop when processing crafted packets. Public advisories (Debian DSA-1049-1; Red Hat RHSA-2006:0420; CentOS/CESA-2006:0420) indicate updated Ethereal packages to fix these issues, with Debian ...

CVE-2006-1935

CVE-2006-1935 affects Ethereal up to 0.10.14 via the COPS dissector. The vulnerability is a buffer overflow in the COPS dissector that could allow a remote attacker to crash Ethereal and potentially execute arbitrary code. Public documents (Debian DSAs, RHSA/CentOS advisories, OpenVAS entries) co...

CVE-2006-1939

CVE-2006-1939 is one of multiple vulnerabilities in Ethereal up to version 0.10.14. The description notes null pointer dereferences in several dissectors (ASN.1, GSM SMS, RPC, and ASN.1-based) and an invalid display filter that could cause a crash. Connected advisories confirm broader issues acro...

CVE-2006-1940

CVE-2006-1940 affects Ethereal (0.10.4–0.10.14) with a vulnerability in the SNDCP dissector that could cause an abort/DoS on processing malformed traffic. Public advisories (Debian DSA-1049-1; CentOS/RH advisories) describe multiple related dissectors and indicate remediation via updating Etherea...

CVE-2006-1938

CVE-2006-1938 affects Ethereal (0.8.x up to 0.10.14) with a NULL pointer dereference in the SMB PIPE dissector and when reading a malformed Sniffer capture, potentially causing a crash. Connected advisories corroborate multiple related issues in Ethereal’s protocol dissectors and note remediation...

CVE-2006-1932

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

CVE-2006-1934

CVE-2006-1934 is an ETHereal (Wireshark) vulnerability affecting the 0.10.x line up to 0.10.14. The issue is a buffer overrun in the Network Instruments file code (one of several dissectors), which could allow a remote attacker to crash the application and, potentially, execute arbitrary code. Pu...

CVE-2006-1938

Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via the 1 Sniffer capture or 2 SMB PIPE dissector...

CVE-2006-1937

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via 1 multiple vectors in H.248, and the 2 X.509if, 3 SRVLOC, 4 H.245, 5 AIM, and 6 general packet dissectors; and 7 the statistics counter...

CVE-2006-1937

CVE-2006-1937 affects Ethereal 0.10.x up to 0.10.14. Remote attackers could crash Ethereal via the SRVLOC and AIM dissectors and the statistics counter (null dereference) among several non‑specific dissectors (H.248, X.509if, SRVLOC, H.245, AIM, and general packet dissectors). Affected product: E...

CVE-2006-1932

CVE-2006-1932 (and related CVEs 1933–1940) affect Ethereal up to version 0.10.14, via multiple dissectors and the OID printing routine, causing off-by-one errors, infinite loops, buffer overruns, crashes or aborts. Public advisories (Debian DSA-1049-1, RHSA-2006:0420, Gentoo GLSA 200604-17, OpenV...

CVE-2006-1933

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service large or infinite loops viarafted packets to the 1 UMA and 2 BER dissectors...

CVE-2006-1940

Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service abort via the SNDCP dissector...

CVE-2006-1939

Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service crash from null dereference via 1 an invalid display filter, or the 2 GSM SMS, 3 ASN.1-based, 4 DCERPC NT, 5 PER, 6 RPC, 7 DCERPC, and 8 ASN.1 dissectors...

CVE-2006-1935

Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the COPS dissector...

Ethereal 0.99.0 Release Notes

Ethereal 0.99.0 Release Notes Table of Contents What is Ethereal? What's New Bug Fixes New and Updated Features New Protocol Support Updated Protocol Support New and Updated Capture File Support Getting Ethereal Microsoft Windows Sun Solaris Source Code Vendor-supplied Packages File Locations Kno...

Multiple Ethereal security vulnerabilities

30 errors on parsing different protocols...

PT-2006-2921 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.x up to 0.10.14 Description: The issue affects multiple components, including H.248, X.509if, SRVLOC, H.245, AIM, and general packet dissectors, as well as the statistics counter. Remote attackers can cause a denial of...

PT-2006-2917 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.x up to 0.10.14 Description: The issue involves multiple unspecified vulnerabilities that allow remote attackers to cause a denial of service through crafted packets to the 1 UMA and 2 BER dissectors, potentially leadin...