Fergie's Tech Blog

Vulnerability Watch: Time to Upgrade Ethereal...

Pedro Bueno writes over on the SANS ISC Daily Handlers Diary:

Yes, if you use Ethereal, it is time to upgrade.

According an advisory posted by FrSIRT, 28 vulnerabilities has been identified in Ethereal "which could be exploited by remote attackers to compromise a vulnerable system or cause a denial of service."

Ethereal released a new version to fix those, on its version 0.99, which you can find here.

Versions that were confirmed to be vulnerable are: Ethereal 0.8.5 through 0.10.14

Since FrSIRT went to a paid-only subscriber basis, you can find details of the vulnerabilities over at Secunia here.

posted by Fergie @ 4/25/2006 06:34:00 AM