The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.
Affected Platforms
Mandrakesoft Mandrake LinuxGentoo LinuxRedhat Enterprise LinuxRedhat Linux Advanced WorkstationEthereal Group Ethereal