Description
Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) ALCAP dissector, (2) Network Instruments file code, or (3) NetXray/Windows Sniffer file code.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | ethereal | 0.10.10-2sarge5 | DSA-1049-1 |
| Debian 3.0 | ethereal | 0.9.4-1woody15 | DSA-1049-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | ethereal +1 | 0.99.0-EL3.2 | RHSA-2006:0420 |
Advisories 2
- RHSA-2006:0420 Red Hat Security Advisory: ethereal security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1049-1 ethereal - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- ethereal-net-instr-bo(26026) vdb-entry
- 19828 third-party-advisory
- 19839 third-party-advisory
- 20210 third-party-advisory
- ethereal-alcap-dissector-bo(26014) vdb-entry
- FEDORA-2006-456 vendor-advisory
- MDKSA-2006:077 vendor-advisory
- http://www.ethereal.com/appnotes/enpa-sa-00023.html
- 19769 third-party-advisory
- 19962 third-party-advisory
- FEDORA-2006-461 vendor-advisory
- 1015985 vdb-entry
- GLSA-200604-17 vendor-advisory
- ADV-2006-1501 vdb-entry
- DSA-1049 vendor-advisory
- 19805 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-128.htm
- SUSE-SR:2006:010 vendor-advisory
- oval:org.mitre.oval:def:10445 vdb-entry signature
- 20117 third-party-advisory
- 17682 vdb-entry
- 20944 third-party-advisory
- ethereal-netxwin-sniffer-bo(26027) vdb-entry
- RHSA-2006:0420 vendor-advisory
- 19958 third-party-advisory