CVE:CVE-2006-1937
CNNVD:CNNVD-200604-494
Ethereal 0.10.x至0.10.14存在多个未明漏洞。这使得远程攻击者可以借助于(1)H.248中的多个向量、(2)X.509if、(3)SRVLOC、(4)H.245、(5)AIM、(6)通用包分析器和(7)统计计数器造成拒绝服务(由空值解引用而造成的崩溃)。
solution:Upgrade ethereal_group ethereal to a higher version than 0.10,0.10.0,0.10.0a,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12,0.10.13,and avoid the version 0.10,0.10.0,0.10.0a,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12,0.10.13