FrSIRT - Mandriva Security Update Fixes Ethereal IRC Dissector Vulnerability / Exploit (Security Advisories)

French Security Incident Response Team

French

English

Mandriva Security Update Fixes Ethereal IRC Dissector Vulnerability

Title : Mandriva Security Update Fixes Ethereal IRC Dissector Vulnerability
Advisory ID : FrSIRT/ADV-2005-2208
CVE ID : GENERIC-MAP-NOMATCH
Rated as : Moderate Risk

Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2005-10-27

Advisory Details

Description

Affected Products

Solution

References

Technical Description

Mandriva has released updated packages to correct a vulnerability identified in Ethereal [...]

Solution

Upgrade the affected packages :
Mandriva Linux 10.2:
30d68fb7d3dd3e10f99ce0e4067e29e3 10.2/RPMS/ethereal-0.10.13-0.2.102mdk.i586.rpm
ee195abe7f3fd9abe3db39cd3b497a8c 10.2/RPMS/ethereal-tools-0.10.13-0.2.102mdk.i586.rpm
8930ea673040d37f41ad955412ba3623 10.2/RPMS/libethereal0-0.10.13-0.2.102mdk.i586.rpm
3bc4bd7208feaf92f77f3a83b0f3281b 10.2/RPMS/tethereal-0.10.13-0.2.102mdk.i586.rpm
7fe65f07557a9dcb662eb1b6967ce31f 10.2/SRPMS/ethereal-0.10.13-0.2.102mdk.src.rpm
Mandriva Linux 10.2/X86_64:
cb69d27d896a19a03fe1c05effffe98d x86_64/10.2/RPMS/ethereal-0.10.13-0.2.102mdk.x86_64.rpm
28dca424f2fdef25ab9b5f2115c7b577 x86_64/10.2/RPMS/ethereal-tools-0.10.13-0.2.102mdk.x86_64.rpm
b47935d8d59d817e69b54d2487e12445 x86_64/10.2/RPMS/lib64ethereal0-0.10.13-0.2.102mdk.x86_64.rpm
e717805302885ba4af36a16768f93668 x86_64/10.2/RPMS/tethereal-0.10.13-0.2.102mdk.x86_64.rpm
7fe65f07557a9dcb662eb1b6967ce31f x86_64/10.2/SRPMS/ethereal-0.10.13-0.2.102mdk.src.rpm
Mandriva Linux 2006.0:
993d95642384bf74c9ed2f7279caa3b2 2006.0/RPMS/ethereal-0.10.13-0.2.20060mdk.i586.rpm
a8cb961f3fee116724f8af4ce64f8244 2006.0/RPMS/ethereal-tools-0.10.13-0.2.20060mdk.i586.rpm
ef572149f1c053ddcf47afa4c704ca58 2006.0/RPMS/libethereal0-0.10.13-0.2.20060mdk.i586.rpm
21d6112631fa025e0b01b2fe7698aada 2006.0/RPMS/tethereal-0.10.13-0.2.20060mdk.i586.rpm
04595febee4cf49a9e851563ef8975c9 2006.0/SRPMS/ethereal-0.10.13-0.2.20060mdk.src.rpm
Mandriva Linux 2006.0/X86_64:
a1af50cf48c2d44c44b0068ee265609f x86_64/2006.0/RPMS/ethereal-0.10.13-0.2.20060mdk.x86_64.rpm
c4c26c4bcd136c8a8d540c62e51ba8f5 x86_64/2006.0/RPMS/ethereal-tools-0.10.13-0.2.20060mdk.x86_64.rpm
fc393647ae421ef0e9b60967bc22b65e x86_64/2006.0/RPMS/lib64ethereal0-0.10.13-0.2.20060mdk.x86_64.rpm
ca89deabfae41880a7e37e6e70451caf x86_64/2006.0/RPMS/tethereal-0.10.13-0.2.20060mdk.x86_64.rpm
04595febee4cf49a9e851563ef8975c9 x86_64/2006.0/SRPMS/ethereal-0.10.13-0.2.20060mdk.src.rpm

ChangeLog

2005-10-27 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.

Mailinglist

	Mozilla Products Code Execution and Security Bypass Vulnerabilities
	Mozilla Firefox for Mac OS X GIF Rendering Code Execution Vulnerability
	Mozilla Products Remote Code Execution and Security Bypass Issues
	Mozilla Products Code Execution and Injection Vulnerabilities
	Mozilla JavaScript Garbage Collector Code Execution Vulnerability
	Mozilla Thunderbird Code Execution and Cross Site Scripting Issues
	Mozilla Firefox and SeaMonkey Multiple Remote Code Execution Issues

	IBM Lotus Quickr Denial of Service and Security Bypass Vulnerabilities
	IBM Tivoli Netcool/Webtop Multiple Security Bypass Vulnerabilities
	IBM WebSphere Application Server Security Exposure Vulnerabilities
	IBM DB2 Universal Database Multiple Denial of Service
	IBM AIX "swcons" Insecure Permission Privilege Escalation Vulnerability
	IBM WebSphere Application Server Cross Site Scripting Vulnerability
	IBM DB2 CLR Stored Procedures Unspecified Vulnerability

	Apple Mac OS X Code Execution and Security Bypass Vulnerabilities
	Apple TV Multiple File Processing Code Execution Vulnerabilities
	Apple Mac OS X Code Execution and Security Bypass Vulnerabilities
	Apple iPhone Code Execution and Security Bypass Vulnerabilities
	Apple QuickTime Multiple Remote Code Execution Vulnerabilities
	Apple iTunes Driver Integer Overflow Privilege Escalation Vulnerability
	Apple iPod touch Code Execution and Security Bypass Vulnerabilities