CVE:CVE-2006-1938
CNNVD:CNNVD-200604-483
Ethereal 0.8.x至0.10.14版本存在多个未明漏洞。这使得远程攻击者可以借助于(1)嗅探器捕获或(2)SMB PIPE分析器造成拒绝服务(由空值解引用造成的崩溃)。
solution:Upgrade ethereal_group ethereal to a higher version than 0.8,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.11,0.8.12,0.8.13,0.8.14,0.8.15,0.8.16,0.8.17,0.8.17a,0.8.18,0.8.19,0.8.20,0.9,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.9_.0,0.10,0.10.0,0.10.0a,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12,0.10.13,and avoid the version 0.8,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.11,0.8.12,0.8.13,0.8.14,0.8.15,0.8.16,0.8.17,0.8.17a,0.8.18,0.8.19,0.8.20,0.9,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.9_.0,0.10,0.10.0,0.10.0a,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12,0.10.13