Executive Summary

Informations
Name	CVE-2006-1935	First vendor Publication	2006-04-25
Vendor	Cve	Last vendor Modification	2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the COPS dissector.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1935

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:10811
Oval ID:	oval:org.mitre.oval:def:10811
Title:	Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the COPS dissector.
Description:	Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the COPS dissector.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2006-1935	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section ethereal-gnome is earlier than 0:0.99.0-EL3.2 AND ethereal is earlier than 0:0.99.0-EL3.2 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section ethereal-gnome is earlier than 0:0.99.0-EL4.2 AND ethereal is earlier than 0:0.99.0-EL4.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Ethereal Group Ethereal cpe:/a:ethereal_group:ethereal:0.9.16 cpe:/a:ethereal_group:ethereal:0.9.15 cpe:/a:ethereal_group:ethereal:0.10.9 cpe:/a:ethereal_group:ethereal:0.10.8 cpe:/a:ethereal_group:ethereal:0.10.7 cpe:/a:ethereal_group:ethereal:0.10.6 cpe:/a:ethereal_group:ethereal:0.10.5 cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.13 cpe:/a:ethereal_group:ethereal:0.10.12 cpe:/a:ethereal_group:ethereal:0.10.11 cpe:/a:ethereal_group:ethereal:0.10.10 cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.0a cpe:/a:ethereal_group:ethereal:0.10.0 cpe:/a:ethereal_group:ethereal:0.10	18

Open Source Vulnerability Database (OSVDB)

id	Description
24931	Ethereal COPS Dissector Overflow

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/17682
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm http://www.ethereal.com/appnotes/enpa-sa-00023.html
DEBIAN	http://www.debian.org/security/2006/dsa-1049
FEDORA	http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00194.html http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00195.html
GENTOO	http://www.gentoo.org/security/en/glsa/glsa-200604-17.xml
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDKSA-2006:077
REDHAT	http://www.redhat.com/support/errata/RHSA-2006-0420.html
SECTRACK	http://securitytracker.com/id?1015985
SECUNIA	http://secunia.com/advisories/19769 http://secunia.com/advisories/19805 http://secunia.com/advisories/19828 http://secunia.com/advisories/19839 http://secunia.com/advisories/19958 http://secunia.com/advisories/19962 http://secunia.com/advisories/20117 http://secunia.com/advisories/20210 http://secunia.com/advisories/20944
SGI	ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
SUSE	http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html
VUPEN	http://www.vupen.com/english/advisories/2006/1501
XF	http://xforce.iss.net/xforce/xfdb/26013

Alert History

Date	Informations
2013-05-11 10:54:52	Multiple Updates