#1677 closed defect (fixed)
UPDATE: ethereal-0.10.3 (security fix)
| Reported by: | jbenninghoff@… | Owned by: | opendarwin.org@… |
|---|---|---|---|
| Priority: | Normal | Milestone: | |
| Component: | ports | Version: | 1.0 |
| Keywords: | Cc: | jbenninghoff@… | |
| Port: |
Description
Updates ethereal to 0.10.3. Tested on 10.3.3.
Fixes a security flaw discussed here: http://www.ethereal.com/appnotes/enpa-sa-00013.html Security Flaw Summary: It may be possible to make Ethereal crash or run arbitrary code by injecting a purposefully malformed packet onto the wire, by convincing someone to read a malformed packet trace file, or by creating a malformed color filter file.
Attachments (1)
Change History (4)
Changed 20 years ago by jbenninghoff@…
| Attachment: | ethereal-update-diff added |
|---|
comment:1 Changed 20 years ago by opendarwin.org@…
| Status: | new → assigned |
|---|
comment:2 Changed 20 years ago by opendarwin.org@…
Tested w/ +pcre +net-snmp +adns on 10.3.2, appears to work just fine.
Note: See
TracTickets for help on using
tickets.
cvs-unidiff-patch