Technical Description

Mandriva has released updated packages to correct multiple vulnerabilities identified in Ethereal. These flaws could be exploited by remote attackers to execute arbitrary commands or cause a denial of service. For additional information, see : VUPEN/ADV-2005-3095

Affected Products

Mandriva Linux 2006.0

Solution

Upgrade the affected packages :

Mandriva Linux 2006.0:
a055efb80c48c277b052ad733a7f8dc9 2006.0/RPMS/ethereal-0.10.14-0.1.20060mdk.i586.rpm
acf8e4fc1f1c2d75002c8583474d4f01 2006.0/RPMS/ethereal-tools-0.10.14-0.1.20060mdk.i586.rpm
499b8112338d62b7b2db6ad3f0869109 2006.0/RPMS/libethereal0-0.10.14-0.1.20060mdk.i586.rpm
528f458848c122e2fd42fb3116643fea 2006.0/RPMS/tethereal-0.10.14-0.1.20060mdk.i586.rpm
44c4e7789d3e6b33ec5c4cf077557fc1 2006.0/SRPMS/ethereal-0.10.14-0.1.20060mdk.src.rpm

Mandriva Linux 2006.0/X86_64:
1a99f01c91cbf6dde19f41d1e3dd27eb x86_64/2006.0/RPMS/ethereal-0.10.14-0.1.20060mdk.x86_64.rpm
f628d006ff03fbd21deb47b0387a3388 x86_64/2006.0/RPMS/ethereal-tools-0.10.14-0.1.20060mdk.x86_64.rpm
56cf815f56a5baa86820ed1d9e844066 x86_64/2006.0/RPMS/lib64ethereal0-0.10.14-0.1.20060mdk.x86_64.rpm
1528803d727413623fd5b3f40414f7e1 x86_64/2006.0/RPMS/tethereal-0.10.14-0.1.20060mdk.x86_64.rpm
44c4e7789d3e6b33ec5c4cf077557fc1 x86_64/2006.0/SRPMS/ethereal-0.10.14-0.1.20060mdk.src.rpm

References

http://www.vupen.com/english/advisories/2006/0024
http://archives.mandrivalinux.com/security-announce/2006-01/msg00003.php

ChangeLog

2006-01-04 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.