[SECURITY] [DSA 718-1] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 718-1 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...

DSA-718-1 ethereal - buffer overflow

Bulletin has no description...

security flaw

Multiple buffer overflows in the dissecta11radius function in the CDMA A11 3G-A11 dissector packet-3g-a11.c for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values...

security flaw

The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service application crash...

security flaw

Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service application crash...

security flaw

Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service application crash...

security flaw

Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...

security flaw

The IAPP dissector packet-iapp.c for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissectpdus and pduvaltostr functions...

PT-2005-1796 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.14 through 0.10.9 Description: The issue is related to an unknown vulnerability in the sFlow dissector, which allows remote attackers to cause a denial of service, resulting in an application crash. Recommendations: For...

CVE-2005-0765: Undefined Security Weakness

Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service application crash...

CVE-2005-0766: Undefined Security Weakness

Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service application crash...

CVE-2005-0704

Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...

CVE-2005-0705

The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service application crash...

CVE-2005-0704

CVE-2005-0704 describes a buffer overflow in the Etheric dissector of Ethereal (versions 0.10.7–0.10.9) that can be triggered by processing crafted network packets, leading to a denial of service (application crash) and potentially remote code execution. Multiple vendor advisories (e.g., Red Hat ...

PT-2005-1745 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.7 through 0.10.9 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, when the "ignore cipher bit" option is enabled in the GPRS-LLC dissector. Recommendations:...

CVE-2005-0705: Undefined Security Weakness

The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service application crash...

PT-2005-1744 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.7 through 0.10.9 Description: The issue is related to a buffer overflow in the Etheric dissector, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash, and potential...

CVE-2005-0704: Undefined Security Weakness

Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...

Mandrake Linux Security Advisory : ethereal (MDKSA-2005:053)

"A number of issues were discovered in Ethereal versions prior to 0.10.10, which is provided by this update. Matevz Pustisek discovered a buffer overflow in the Etheric dissector CVE-2005-0704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Ethereal remote buffer overflow #2

LSS Security Advisory LSS-2005-03-05 http://security.lss.hr --- Title : Ethereal remote buffer overflow 2 Advisory ID : LSS-2005-03-05 Date : 2005-03-10 Advisory URL: : http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05 Impact : DoS and maybe possible code execution Risk level : Medi...