Ethereal Malformed SNMP Denial of Service Vulnerability

Threat level definition

Ethereal Malformed SNMP Denial of Service Vulnerability

Solution:
Though 0.9.2 fixes this problem, there are additional issues with the 0.9.2 release. Users are advised to use the 0.9.3 release.

Vendor fixes available:

Gerald Combs Ethereal 0.8.13

Conectiva ethereal-0.9.3-1U50_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/ethereal-0.9.3-1U50_1cl.i 386.rpm

Conectiva ethereal-0.9.3-1U51_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/ethereal-0.9.3-1U51_1cl.i 386.rpm

Conectiva ethereal-0.9.3-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.3-1U60_1cl.i 386.rpm

Conectiva ethereal-0.9.3-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.3-1U70_1cl.i 386.rpm

Ethereal Group ethereal-0.9.3.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.3.tar.gz

FreeBSD ethereal-0.9.3.tgz
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/All/eth ereal-0.9.3.tgz

Ethereal Group Ethereal 0.8.18

Red Hat ethereal-0.9.4-0.7.2.0.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/ethereal-0.9.4-0.7.2.0.i386.rp m

Red Hat ethereal-0.9.4-0.7.2.0.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/ethereal-0.9.4-0.7.2.0.ia64.rp m

Red Hat ethereal-gnome-0.9.4-0.7.2.0.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/ethereal-gnome-0.9.4-0.7.2.0.i 386.rpm

Red Hat ethereal-gnome-0.9.4-0.7.2.0.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/ethereal-gnome-0.9.4-0.7.2.0.i a64.rpm

Ethereal Group Ethereal 0.9.1

Ethereal Group ethereal-0.9.3.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.3.tar.gz

Privacy Statement
Copyright 2009, SecurityFocus