Multiple vulnerabilities in Ethereal network protocol analyzer
CVE-2006-1938

Currently unrated

Key Information:

Status
Vendor
CVE Published:
25 April 2006

What is CVE-2006-1938?

Ethereal, a widely used network protocol analyzer, contains multiple unspecified vulnerabilities that can be exploited by remote attackers. These vulnerabilities allow attackers to cause the application to crash through null dereference errors in the Sniffer capture and SMB PIPE dissectors. This results in a denial of service that compromises the availability of network analysis capabilities for users, highlighting the need for updates and patches to maintain security.

References

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.