1230 matches found
Ethereal 0.x - Multiple iSNS SMB SNMP Protocol Dissector Vulnerabilities
Ethereal 0.x - Multiple iSNS SMB SNMP Protocol Dissector Vulnerabilities // source: https://www.securityfocus.com/bid/10672/info Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a...
RHEL 2.1 / 3 : ethereal (RHSA-2004:378)
Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. The SNMP dissector in Ethereal releases 0.8.15 through 0.10.4 contained a memory read flaw. On a system where Ethereal is running, a remote attacker could...
Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities
// source: https://www.securityfocus.com/bid/10672/info Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a SNMP protocol dissector vulnerability. These issues are due to a failure...
Mandrake Linux Security Advisory : ethereal (MDKSA-2003:070)
A number of string handling bugs were found in the packet dissectors in ethereal that can be exploited using specially crafted packets to cause ethereal to consume excessive amounts of memory, crash, or even execute arbitrary code. These vulnerabilities have been fixed upsteam in ethereal 0.9.13...
Mandrake Linux Security Advisory : ethereal (MDKSA-2003:051)
A vulnerability was discovered in Ethereal 0.9.9 and earlier that allows a remote attacker to use specially crafted SOCKS packets to cause a denial of service DoS and possibly execute arbitrary code. A similar vulnerability also exists in the NTLMSSP code in Ethereal 0.9.9 and earlier, due to a...
Mandrake Linux Security Advisory : ethereal (MDKSA-2003:067)
Several vulnerabilities in ethereal were discovered by Timo Sirainen. Integer overflows were found in the Mount and PPP dissectors, as well as one-byte buffer overflows in the AIM, GIOP Gryphon, OSPF, PPTP, Quake, Quake2, Quake3, Rsync, SMB, SMPP, and TSP dissectors. These vulnerabilities were...
Mandrake Linux Security Advisory : ethereal (MDKSA-2004:067)
Three vulnerabilities were discovered in Ethereal versions prior to 0.10.5 in the iSNS, SMB SID, and SNMP dissectors. It may be possible to make Ethereal crash or run arbitrary code by injecting a purposefully malformed packet into the wire or by convincing someone to read a malformed packet trac...
Mandrake Linux Security Advisory : ethereal (MDKSA-2003:114)
A number of vulnerabilities were discovered in ethereal that, if exploited, could be used to make ethereal crash or run arbitrary code by injecting malicious malformed packets onto the wire or by convincing someone to read a malformed packet trace file. A buffer overflow allows attackers to cause...
Mandrake Linux Security Advisory : ethereal (MDKSA-2004:002)
Two vulnerabilities were discovered in versions of Ethereal prior to 0.10.0 that can be exploited to make Ethereal crash by injecting malformed packets onto the wire or by convincing a user to read a malformed packet trace file. The first vulnerability is in the SMB dissector and the second is in...
Mandrake Linux Security Advisory : ethereal (MDKSA-2004:024)
A number of serious issues have been discovered in versions of Ethereal prior to 0.10.2. Stefan Esser discovered thirteen buffer overflows in the NetFlow, IGAP, EIGRP, PGM, IrDA, BGP, ISUP, and TCAP dissectors. Jonathan Heusser discovered that a carefully-crafted RADIUS packet could cause Etherea...
SUSE-SA:2003:019: ethereal
The remote host is missing the patch for the advisory SUSE-SA:2003:019 ethereal. Ethereal is a GUI for analyzing and displaying network traffic. Ethereal is vulnerable to a format string bug in it's SOCKS code and to a heap buffer overflow in it's NTLMSSP code. These bugs can be abused to crash...
Fedora Core 2 : ethereal-0.10.3-2.1 (2004-153)
Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...
Fedora Core 2 : ethereal-0.10.3-2.2 (2004-172)
These new packages fix a bug in the last errata where the actual security patch didn't get applied. All users of ethereal are strongly recommended to update to these latest packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
Fedora Core 1 : ethereal-0.10.3-0.1.1 (2004-152)
Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...
Fedora Core 2 : ethereal-0.10.5-0.2.1 (2004-220)
Issues have been discovered in the following protocol dissectors : - The iSNS dissector could make Ethereal abort in some cases. 0.10.3 - 0.10.4 CVE-2004-0633 - SMB SID snooping could crash if there was no policy name for a handle. 0.9.15 - 0.10.4 CVE-2004-0634 - The SNMP dissector could crash du...
Fedora Core 1 : ethereal-0.10.5-0.1.1 (2004-219)
Issues have been discovered in the following protocol dissectors : - The iSNS dissector could make Ethereal abort in some cases. 0.10.3 - 0.10.4 CVE-2004-0633 - SMB SID snooping could crash if there was no policy name for a handle. 0.9.15 - 0.10.4 CVE-2004-0634 - The SNMP dissector could crash du...
[SECURITY] [DSA 528-1] New ethereal packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 528-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...
DSA-528 ethereal - denial of service
Bulletin has no description...
[ GLSA 200407-08 ] Ethereal: Multiple security problems
Gentoo Linux Security Advisory GLSA 200407-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...