Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-3628
HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3628

2006-07-2114:03:00
CWE-134
[email protected]
web.nvd.nist.gov
39
wireshark
ethereal
format string
vulnerability
remote code execution
denial of service
cve-2006-3628

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.

Affected configurations

NVD
Node
ethereal_groupetherealMatch0.10
OR
ethereal_groupetherealMatch0.10.0
OR
ethereal_groupetherealMatch0.10.0a
OR
ethereal_groupetherealMatch0.10.1
OR
ethereal_groupetherealMatch0.10.2
OR
ethereal_groupetherealMatch0.10.3
OR
ethereal_groupetherealMatch0.10.4
OR
ethereal_groupetherealMatch0.10.5
OR
ethereal_groupetherealMatch0.10.6
OR
ethereal_groupetherealMatch0.10.7
OR
ethereal_groupetherealMatch0.10.8
OR
ethereal_groupetherealMatch0.10.9
OR
ethereal_groupetherealMatch0.10.10
OR
ethereal_groupetherealMatch0.10.11
OR
ethereal_groupetherealMatch0.10.12
OR
ethereal_groupetherealMatch0.10.13
OR
ethereal_groupetherealMatch0.10.14
OR
ethereal_groupetherealMatch0.99.0
OR
wiresharkwiresharkMatch0.10
OR
wiresharkwiresharkMatch0.10.4
OR
wiresharkwiresharkMatch0.10.13
OR
wiresharkwiresharkMatch0.99
OR
wiresharkwiresharkMatch0.99.1

References

Related

ubuntucve 1
cvelist 1
nvd 1
debiancve 1
nessus 9
openvas 6
debian 1
osv 1
redhat 1
centos 2
altlinux 1
gentoo 1
securityvulns 1
oraclelinux 1
ubuntucve
ubuntucve
CVE-2006-3628
2006-07-21 00:00:00
cvelist
cvelist
CVE-2006-3628
2006-07-18 21:00:00
nvd
nvd
CVE-2006-3628
2006-07-21 14:03:00
debiancve
debiancve
CVE-2006-3628
2006-07-21 14:03:00
nessus
nessus
Debian DSA-1127-1 : ethereal - several vulnerabilities
2006-10-14 00:00:00
Mandrake Linux Security Advisory : wireshark (MDKSA-2006:128)
2006-12-16 00:00:00
GLSA-200607-09 : Wireshark: Multiple vulnerabilities
2006-07-28 00:00:00
openvas
openvas
Debian Security Advisory DSA 1127-1 (ethereal)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1127)
2008-01-17 00:00:00
SLES9: Security update for ethereal
2009-10-10 00:00:00
debian
debian
[SECURITY] [DSA 1127-1] New ethereal packages fix several vulnerabilities
2006-07-28 05:41:07
osv
osv
ethereal - several
2006-07-28 00:00:00
redhat
redhat
(RHSA-2006:0602) wireshark security update (was ethereal)
2006-08-16 00:00:00
centos
centos
wireshark security update
2006-08-16 19:29:57
wireshark security update
2006-08-16 23:38:08
altlinux
altlinux
Security fix for the ALT Linux 9 package wireshark version 0.99.2-alt1
2006-07-18 00:00:00
gentoo
gentoo
Wireshark: Multiple vulnerabilities
2006-07-25 00:00:00
securityvulns
securityvulns
[ MDKSA-2006:128 ] - Updated wireshark packages fix numerous vulnerabilities
2006-07-22 00:00:00
oraclelinux
oraclelinux
Moderate wireshark security update
2006-12-07 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON
Related for CVE-2006-3628
ubuntucve1cvelist1nvd1debiancve1nessus9openvas6debian1osv1redhat1centos2altlinux1gentoo1securityvulns1oraclelinux1