Several denial of service vulnerabilities were discovered in ethereal,
a network traffic analyzer. These vulnerabilites are described in the
ethereal advisory "enpa-sa-00015". Of these, only one (CAN-2004-0635)
affects the version of ethereal in Debian woody. This vulnerability
could be exploited by a remote attacker to crash ethereal with an
invalid SNMP packet.
For the current stable distribution (woody), these problems have been
fixed in version 0.9.4-1woody8.
For the unstable distribution (sid), these problems have been fixed in
version 0.10.5-1.
We recommend that you update your ethereal package.
Upgrade Instructions
- --------------------
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources...
Get the latest Linux and open source security news straight to your inbox.