|
|
>> Fedora Security Update Fixes Ethereal IRC Dissector Vulnerability
|
Title : Fedora Security Update Fixes Ethereal IRC Dissector Vulnerability VUPEN ID : VUPEN/ADV-2006-0067 CVE ID : CVE-2005-3313
Rated as : Moderate Risk 
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-01-06
|
Fedora has released updated packages to correct a vulnerability identified in Ethereal. This flaw is due to an infinite loop in the IRC dissector, which could be exploited by remote attackers to cause a denial of service. For additional information, see : VUPEN/ADV-2005-3095
Affected Products
Fedora Core 3
Fedora Core 4
Solution
Upgrade the affected packages :
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
37de6115fdd7816ac1916c0ac0166190 SRPMS/ethereal-0.10.14-1.FC3.1.src.rpm
d70b0319cac82a7ff450358ea10fa100 x86_64/ethereal-0.10.14-1.FC3.1.x86_64.rpm
dbef72404739fcf2d3ba25202955cf64 x86_64/ethereal-gnome-0.10.14-1.FC3.1.x86_64.rpm
4240b81a06114352718c54af73fce160 x86_64/debug/ethereal-debuginfo-0.10.14-1.FC3.1.x86_64.rpm
5aed47fb84cedd9ab9fc24f70c26506c i386/ethereal-0.10.14-1.FC3.1.i386.rpm
747e7bb89b7638e2376d459578f7224e i386/ethereal-gnome-0.10.14-1.FC3.1.i386.rpm
e6d37b48f003bf925981b8ee56d80665 i386/debug/ethereal-debuginfo-0.10.14-1.FC3.1.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
affe1eb1afcd43ff516e84d2d72ffc05 SRPMS/ethereal-0.10.14-1.FC4.1.src.rpm
0bad077e8bb64b17b8d46ff7b850981b ppc/ethereal-0.10.14-1.FC4.1.ppc.rpm
7c3487788fd67fcff93a8ab84b8a02d6 ppc/ethereal-gnome-0.10.14-1.FC4.1.ppc.rpm
269573f80ae4c2e6ed293679017e3c52 ppc/debug/ethereal-debuginfo-0.10.14-1.FC4.1.ppc.rpm
1f2d0fc4c51781edf58492848d275a30 x86_64/ethereal-0.10.14-1.FC4.1.x86_64.rpm
0596c4ecffad375876556769cba26662 x86_64/ethereal-gnome-0.10.14-1.FC4.1.x86_64.rpm
933603daec37ab30725cf822c015e911 x86_64/debug/ethereal-debuginfo-0.10.14-1.FC4.1.x86_64.rpm
b108f4faf613e9ec7ac1c872f6f6b9e6 i386/ethereal-0.10.14-1.FC4.1.i386.rpm
ceaa262d2bbd36d7e598f306d2ae85d8 i386/ethereal-gnome-0.10.14-1.FC4.1.i386.rpm
2889e71042aca4212a9f373e66f6a8e1 i386/debug/ethereal-debuginfo-0.10.14-1.FC4.1.i386.rpm
References
http://www.vupen.com/english/advisories/2006/0067 http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00005.html http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00006.html
ChangeLog
2006-01-06 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|