ethereal -- multiple protocol dissectors vulnerabilities

Description:

An Ethreal Security Advisories reports:

Issues have been discovered in the following protocol dissectors:

• Matevz Pustisek discovered a buffer overflow in the Etheric dissector. CVE: CAN-2005-0704
• The GPRS-LLC dissector could crash if the "ignore cipher bit" option was enabled. CVE: CAN-2005-0705
• Diego Giago discovered a buffer overflow in the 3GPP2 A11 dissector. This flaw was later reported by Leon Juranic. CVE: CAN-2005-0699
• Leon Juranic discovered a buffer overflow in the IAPP dissector. CVE: CAN-2005-0739
• A bug in the JXTA dissector could make Ethereal crash.
• A bug in the sFlow dissector could make Ethereal crash.

References:

• BugTraq ID 12759
• CVE name CVE-2005-0699
• CVE name CVE-2005-0704
• CVE name CVE-2005-0705
• CVE name CVE-2005-0739
• URL: <http://www.ethereal.com/appnotes/enpa-sa-00018.html>

Affects:

• ethereal >=0.9.1 <0.10.10
• ethereal-lite >=0.9.1 <0.10.10
• tethereal >=0.9.1 <0.10.10
• tethereal-lite >=0.9.1 <0.10.10

Disclaimer: The data contained on this page is derived from the VuXML document, please refer to the the original document for copyright information. The author of portaudit makes no claim of authorship or ownership of any of the information contained herein.

If you have found a vulnerability in a FreeBSD port not listed in the database, please contact the FreeBSD Security Officer. Refer to "FreeBSD Security Information" for more information.