CVE:CVE-2005-3242
CNNVD:CNNVD-200510-247
Ethereal是一款非常流行的网络协议分析工具。
Ethereal 0.10.12 及早些版本允许远程攻击者通过 (1) IrDA 解析器(2) SMB 解析器中的未知向量引发拒绝服务攻击。
solution:Upgrade ethereal_group ethereal to a higher version than 0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12,and avoid the version 0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12