• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Ethereal AFS Buffer Overflow Vulnerability

Solution:
The following upgrade is available:


Gerald Combs Ethereal 0.8.13

• Conectiva 5.0 ethereal-0.8.14-1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/ethereal-0.8.14-1cl.i386. rpm


• Conectiva 5.0 ethereal-0.8.14-1cl.src.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/SRPMS/ethereal-0.8.14-1cl.src. rpm


• Conectiva 5.1 ethereal-0.8.14-1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/ethereal-0.8.14-1cl.i386. rpm


• Conectiva 5.1 ethereal-0.8.14-1cl.src.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/SRPMS/ethereal-0.8.14-1cl.src. rpm


• Debian 2.2 alpha ethereal_0.8.0-2potato_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/ethe real_0.8.0-2potato_alpha.deb


• Debian 2.2 arm ethereal_0.8.0-2potato_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/ethere al_0.8.0-2potato_arm.deb


• Debian 2.2 i386 ethereal_0.8.0-2potato_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/ether eal_0.8.0-2potato_i386.deb


• Debian 2.2 ppc ethereal_0.8.0-2potato_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/et hereal_0.8.0-2potato_powerpc.deb


• Debian 2.2 sparc ethereal_0.8.0-2potato_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/ethe real_0.8.0-2potato_sparc.deb


• FreeBSD 3.5.1 i386 ethereal-0.8.14.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-3-stable/net/eth ereal-0.8.14.tgz


• FreeBSD 4.2 alpha ethereal-0.8.14.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/alpha/packages-4-stable/net/et hereal-0.8.14.tgz


• FreeBSD 4.2 i386 ethereal-0.8.14.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/net/eth ereal-0.8.14.tgz


• FreeBSD 5.0 alpha ethereal-0.8.14.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/alpha/packages-5-current/net/e thereal-0.8.14.tgz


• FreeBSD 5.0 i386 ethereal-0.8.14.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-5-current/net/et hereal-0.8.14.tgz


• Gerald Combs ethereal-0.8.14.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.8.14.tar.gz