ethereal: protocol dissector and other vulnerabilities [LWN.net]

Package(s):

ethereal

CVE #(s):

CAN-2003-0925 CAN-2003-0926 CAN-2003-0927 CAN-2003-1012 CAN-2003-1013

Created:

December 19, 2003

Updated:

February 13, 2004

Description:

Serious issues have been discovered in two ethereal protocol dissectors. Both vulnerabilities will make the Ethereal application crash. The Q.931 vulnerability also affects Tethereal. It is not known if either vulnerability can be used to make Ethereal or Tethereal run arbitrary code. (CAN-2003-1012 and CAN-2003-1013)

Alerts:

Whitebox	WBSA-2004:002-01	2004-02-12
Fedora-Legacy	FLSA:1193	2004-01-31
Red Hat	RHSA-2004:002-01	2004-01-05
Mandrake	MDKSA-2004:002	2004-01-13
Conectiva	CLA-2004:801	2004-01-07
Red Hat	RHSA-2004:001-01	2004-01-07
Debian	DSA-407-1	2004-01-05
Fedora	FEDORA-2003-040	2003-12-18

(Log in to post comments)