LWN.net Logo

Ethereal packet handling vulnerabilities

Package(s):ethereal CVE #(s):CAN-2002-0353
Created:June 5, 2002 Updated:June 12, 2002
Description: Ethereal 0.9.3 fixed three packet handling vulnerabilities present in 0.9.2 when it was released by the ethereal team on March 30th. The PROTOS test suite found some flaws in SNMP and LDAP protocols support. Malformed packets could also crash ethereal 0.9.2 due to a ASN.1 zero-length g_malloc problem. The zlib "double free" vulnerability was addressed by the updates for that bug from many distributors. (First LWN report: May 2).

Update: The May 19, 2002 release of Ethereal 0.9.4 fixes four potential security issues in Ethereal 0.9.3.Please see the new vulnerability for more information.

Alerts:
Debian DSA-130-1 2002-06-01
Conectiva CLA-2002:474 2002-04-25

(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds