1. CVE-Search
  2. CVE-2006-4331
ID CVE-2006-4331
Summary Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-10-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
oval via4
  • accepted 2013-04-29T04:01:59.195-04:00
    class vulnerability
    contributors
    • name Aharon Chernin
      organization SCAP.com, LLC
    • name Dragos Prisaca
      organization G2, Inc.
    definition_extensions
    • comment The operating system installed on the system is Red Hat Enterprise Linux 3
      oval oval:org.mitre.oval:def:11782
    • comment CentOS Linux 3.x
      oval oval:org.mitre.oval:def:16651
    • comment The operating system installed on the system is Red Hat Enterprise Linux 4
      oval oval:org.mitre.oval:def:11831
    • comment CentOS Linux 4.x
      oval oval:org.mitre.oval:def:16636
    • comment Oracle Linux 4.x
      oval oval:org.mitre.oval:def:15990
    description Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.
    family unix
    id oval:org.mitre.oval:def:10125
    status accepted
    submitted 2010-07-09T03:56:16-04:00
    title Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.
    version 29
  • accepted 2013-08-19T04:00:21.770-04:00
    class vulnerability
    contributors
    • name Shane Shaffer
      organization G2, Inc.
    • name Shane Shaffer
      organization G2, Inc.
    • name Shane Shaffer
      organization G2, Inc.
    definition_extensions
    comment Wireshark is installed on the system.
    oval oval:org.mitre.oval:def:6589
    description Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.
    family windows
    id oval:org.mitre.oval:def:14587
    status accepted
    submitted 2012-02-27T15:34:33.178-04:00
    title Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark 0.99.2
    version 8
redhat via4
advisories
rhsa
id RHSA-2006:0658
rpms
  • wireshark-0:0.99.3-EL3.2
  • wireshark-0:0.99.3-EL4.2
  • wireshark-debuginfo-0:0.99.3-EL3.2
  • wireshark-debuginfo-0:0.99.3-EL4.2
  • wireshark-gnome-0:0.99.3-EL3.2
  • wireshark-gnome-0:0.99.3-EL4.2
refmap via4
bid 19690
cert-vn VU#638376
confirm
gentoo GLSA-200608-26
mandriva MDKSA-2006:152
sectrack 1016736
secunia
  • 21597
  • 21619
  • 21649
  • 21682
  • 21885
  • 22378
vupen ADV-2006-3370
xf wireshark-esp-offbyone(28553)
Last major update 11-10-2017 - 01:31
Published 24-08-2006 - 20:04
Last modified 11-10-2017 - 01:31
Back to Top