Bug 17071

Summary:	new version of ethereal (0.9.10) with security fixes.
Product:	Gentoo Linux	Reporter:	Mr. Bones. (RETIRED) <mr_bones_>
Component:	Current packages	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	critical
Priority:	High
Version:	1.2
Hardware:	All
OS:	Linux
URL:	http://www.ethereal.com/
Whiteboard:
Package list:		Runtime testing required:	---

Description Mr. Bones. (RETIRED) gentoo-dev

2003-03-08 01:25:00 UTC

From the web site:
 
This release fixes a security hole discovered by Georgi Guninski in the SOCKS 
dissector as well as problems with the NTLMSSP and Rsync code. All users of 
previous versions are encouraged to upgrade. See the application advisory  for 
more details. 

Reproducible: Always
Steps to Reproduce:

Comment 1 Mr. Bones. (RETIRED) gentoo-dev

2003-03-08 01:28:36 UTC

the advisory is at:

http://www.ethereal.com/appnotes/enpa-sa-00008.html

Comment 2 Daniel Ahlberg (RETIRED) gentoo-dev

2003-03-09 15:41:30 UTC

glsa sent