The ethereal package is a program for monitoring network traffic.
A number of security flaws have been discovered in Ethereal. On a system
where Ethereal is running, a remote attacker could send malicious packets
to trigger these flaws and cause Ethereal to crash or potentially execute
arbitrary code.
A buffer overflow flaw was discovered in the Etheric dissector. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0704 to this issue.
The GPRS-LLC dissector could crash if the “ignore cipher bit” option was
set. The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-0705 to this issue.
A buffer overflow flaw was discovered in the 3GPP2 A11 dissector. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0699 to this issue.
A buffer overflow flaw was discovered in the IAPP dissector. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0739 to this issue.
Users of ethereal should upgrade to these updated packages, which contain
version 0.10.10 and are not vulnerable to these issues.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | any | i386 | ethereal-gnome | < 0.10.10-1.EL3.1 | ethereal-gnome-0.10.10-1.EL3.1.i386.rpm |
RedHat | any | ppc | ethereal | < 0.10.10-1.EL4.1 | ethereal-0.10.10-1.EL4.1.ppc.rpm |
RedHat | any | s390 | ethereal | < 0.10.10-1.EL3.1 | ethereal-0.10.10-1.EL3.1.s390.rpm |
RedHat | any | s390x | ethereal-gnome | < 0.10.10-1.EL3.1 | ethereal-gnome-0.10.10-1.EL3.1.s390x.rpm |
RedHat | any | x86_64 | ethereal | < 0.10.10-1.EL3.1 | ethereal-0.10.10-1.EL3.1.x86_64.rpm |
RedHat | any | s390 | ethereal-gnome | < 0.10.10-1.EL4.1 | ethereal-gnome-0.10.10-1.EL4.1.s390.rpm |
RedHat | any | i386 | ethereal-gnome | < 0.10.10-1.AS21.1 | ethereal-gnome-0.10.10-1.AS21.1.i386.rpm |
RedHat | any | ppc | ethereal-gnome | < 0.10.10-1.EL4.1 | ethereal-gnome-0.10.10-1.EL4.1.ppc.rpm |
RedHat | any | i386 | ethereal-gnome | < 0.10.10-1.EL4.1 | ethereal-gnome-0.10.10-1.EL4.1.i386.rpm |
RedHat | any | i386 | ethereal | < 0.10.10-1.AS21.1 | ethereal-0.10.10-1.AS21.1.i386.rpm |