CVE:CVE-2006-1933
CNNVD:CNNVD-200604-482
Ethereal 0.10.x至0.10.14版本存在多个未明漏洞。这使得远程攻击者可以借助于传递到(1) UMA分析器和(2) BER分析器中的精心设计的数据包造成拒绝服务(大循环或无限循环)。
solution:Upgrade ethereal_group ethereal to a higher version than 0.10,0.10.0,0.10.0a,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12,0.10.13,and avoid the version 0.10,0.10.0,0.10.0a,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12,0.10.13