aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorSimon L. B. Nielsen <simon@FreeBSD.org>2005-03-15 05:55:46 +0800
committerSimon L. B. Nielsen <simon@FreeBSD.org>2005-03-15 05:55:46 +0800
commit566e20849d645e1c2ab7bf928106bb4f28885fe0 (patch)
treebfb72c251f69867fa058acc073447734b743a644 /security
parent415f02e821bf4c48ae0dc90c40a0bf5b08b8f73f (diff)
downloadfreebsd-ports-gnome-566e20849d645e1c2ab7bf928106bb4f28885fe0.tar.gz
freebsd-ports-gnome-566e20849d645e1c2ab7bf928106bb4f28885fe0.tar.zst
freebsd-ports-gnome-566e20849d645e1c2ab7bf928106bb4f28885fe0.zip
Document ethereal -- multiple protocol dissectors vulnerabilities.
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml46
1 files changed, 46 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 7900eae3ceea..6cef2fc24998 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -32,6 +32,52 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="cb470368-94d2-11d9-a9e0-0001020eed82">
+ <topic>ethereal -- multiple protocol dissectors vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>ethereal</name>
+ <name>ethereal-lite</name>
+ <name>tethereal</name>
+ <name>tethereal-lite</name>
+ <range><ge>0.9.1</ge><lt>0.10.10</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>An Ethreal Security Advisories reports:</p>
+ <blockquote cite="http://www.ethereal.com/appnotes/enpa-sa-00018.html">
+ <p>Issues have been discovered in the following protocol
+ dissectors:</p>
+ <ul>
+ <li>Matevz Pustisek discovered a buffer overflow in the
+ Etheric dissector. CVE: CAN-2005-0704</li>
+ <li>The GPRS-LLC dissector could crash if the "ignore
+ cipher bit" option was enabled. CVE: CAN-2005-0705</li>
+ <li>Diego Giago discovered a buffer overflow in the 3GPP2
+ A11 dissector. This flaw was later reported by Leon
+ Juranic. CVE: CAN-2005-0699</li>
+ <li>Leon Juranic discovered a buffer overflow in the IAPP dissector.
+ CVE: CAN-2005-0739</li>
+ <li>A bug in the JXTA dissector could make Ethereal crash.</li>
+ <li>A bug in the sFlow dissector could make Ethereal crash.</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CAN-2005-0699</cvename>
+ <cvename>CAN-2005-0704</cvename>
+ <cvename>CAN-2005-0705</cvename>
+ <cvename>CAN-2005-0739</cvename>
+ <url>http://www.ethereal.com/appnotes/enpa-sa-00018.html</url>
+ </references>
+ <dates>
+ <discovery>2005-03-09</discovery>
+ <entry>2005-03-14</entry>
+ </dates>
+ </vuln>
+
<vuln vid="bcf27002-94c3-11d9-a9e0-0001020eed82">
<topic>grip -- CDDB response multiple matches buffer overflow
vulnerability</topic>