ethereal security update

2005-10-28T03:32:24
ID CESA-2005:809-01
Type centos
Reporter CentOS Project
Modified 2005-10-28T03:32:24

Description

CentOS Errata and Security Advisory CESA-2005:809-01

The ethereal package is a program for monitoring network traffic.

A number of security flaws have been discovered in Ethereal. On a system where Ethereal is running, a remote attacker could send malicious packets to trigger these flaws and cause Ethereal to crash or potentially execute arbitrary code. The Common Vulnerabilities and Exposures project has assigned the names CVE-2005-3241, CVE-2005-3242, CVE-2005-3243, CVE-2005-3244, CVE-2005-3245, CVE-2005-3246, CVE-2005-3247, CVE-2005-3248, CVE-2005-3249, and CVE-2005-3184 to these issues.

Users of ethereal should upgrade to these updated packages, which contain version 0.10.13 and are not vulnerable to these issues.

Merged security bulletin from advisories: http://lists.centos.org/pipermail/centos-announce/2005-October/024385.html

Affected packages: ethereal ethereal-gnome

Upstream details at: https://rhn.redhat.com/errata/rh21as-errata.html