CVE:CVE-2005-3241
CNNVD:CNNVD-200510-222
Ethereal是一款非常流行的网络协议分析工具。
Ethereal 0.10.12 以及早些版本允许攻击者通过(1)ISAKMP(2)FC-FCS(3)RSVP(4)ISIS LSP 解析器中的未知向量引发拒绝服务攻击。
solution:Upgrade ethereal_group ethereal to a higher version than 0.8.18,0.8.19,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12,and avoid the version 0.8.18,0.8.19,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,0.10.6,0.10.7,0.10.8,0.10.9,0.10.10,0.10.11,0.10.12