Mandrake Linux Security Advisory : ethereal (MDKSA-2005:053)
High Nessus Plugin ID 17331
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionA number of issues were discovered in Ethereal versions prior to 0.10.10, which is provided by this update. Matevz Pustisek discovered a buffer overflow in the Etheric dissector (CVE-2005-0704); the GPRS-LLC dissector could crash if the 'ignore cipher bit' was enabled (CVE-2005-0705); Diego Giago found a buffer overflow in the 3GPP2 A11 dissector (CVE-2005-0699); Leon Juranic found a buffer overflow in the IAPP dissector (CVE-2005-0739); and bugs in the JXTA and sFlow dissectors could make Ethereal crash.
SolutionUpdate the affected packages.