Gentoo Security Advisory GLSA 200505-03 (Ethereal) Network Vulnerability

Summary

The remote host is missing updates announced in advisory GLSA 200505-03.

Solution

All Ethereal users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-analyzer/ethereal-0.10.11' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200505-03 http://bugs.gentoo.org/show_bug.cgi?id=90539 http://www.ethereal.com/appnotes/enpa-sa-00019.html

Insight

Ethereal is vulnerable to numerous vulnerabilities potentially resulting in the execution of arbitrary code or abnormal termination.

Severity

Classification

CVE	CVE-2005-1456, CVE-2005-1457, CVE-2005-1458, CVE-2005-1459, CVE-2005-1460, CVE-2005-1461, CVE-2005-1462, CVE-2005-1463, CVE-2005-1464, CVE-2005-1465, CVE-2005-1466, CVE-2005-1467, CVE-2005-1468, CVE-2005-1469, CVE-2005-1470

CVSS	Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Related Vulnerabilities

Gentoo Security Advisory GLSA 200401-04 (GAIM)
Gentoo Security Advisory GLSA 200406-20 (Openswan)
Gentoo Security Advisory GLSA 200408-03 (libpng)
Gentoo Security Advisory GLSA 200409-12 (imagemagick imlib)
Gentoo Security Advisory GLSA 200406-18 (gzip)

Take action and discover your vulnerabilities