Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Mandrake Local Security Checks --> Category: infos

MDKSA-2003:114: ethereal Vulnerability Scan

Vulnerability Scan Summary
Check for the version of the ethereal package

Detailed Explanation for this Vulnerability Test

The remote host is missing the patch for the advisory MDKSA-2003:114 (ethereal).

A number of vulnerabilities were discovered in ethereal that, if exploited,
could be used to make ethereal crash or run arbitrary code by injecting
malicious malformed packets onto the wire or by convincing someone to read a
malformed packet trace file.
A buffer overflow allows attackers to cause a DoS (Denial of Service) and
possibly execute arbitrary code using a malformed GTP MSISDN string
Likewise, a DoS can be caused by using malformed ISAKMP or MEGACO packets
Finally, a heap-based buffer overflow allows attackers to cause a DoS or execute
arbitrary code using the SOCKS dissector (CVE-2003-0927).
All three vulnerabilities affect all versions of Ethereal up to and including
0.9.15. This update provides 0.9.16 which corrects all of these issues. Also
note that each vulnerability can be exploited by a remote attacker.

Solution :
Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.