Daboweb | Seguridad y ayuda informática |

Actualización que corrige graves problemas de seguridad en version 0.10.9  y  anteriores…

Description:

Issues have been discovered in the following protocol dissectors:

• 
  Matevz Pustisek discovered a buffer overflow in the Etheric dissector.
  Versions affected: 0.10.7 to 0.10.9

  CVE: CAN-2005-0704

• 
  The GPRS-LLC dissector could crash if the «ignore cipher bit» option
  was enabled.
  Versions affected: 0.10.7 – 0.10.9

  CVE: CAN-2005-0705

• 
  Diego Giago discovered a buffer overflow in the 3GPP2
  A11 dissector. This flaw was later reported by Leon Juranic.
  Versions affected: 0.10.3 – 0.10.9

  CVE: CAN-2005-0699

• 
  Leon Juranic discovered a buffer overflow in the IAPP
  dissector.

  CVE: CAN-2005-0739

  Versions affected: 0.9.1 to 0.10.9.

• 
  A bug in the JXTA dissector could make Ethereal crash.

  Versions affected: 0.10.9.

• 
  A bug in the sFlow dissector could make Ethereal crash.
  
  Versions affected: 0.9.14 to 0.10.9.