Ethereal contains a flaw that may allow a remote denial of service. The issue is triggered by using a zero-length presentation protocol selector, and will result in loss of availability for the application. No further details have been provided.

Upgrade to version 0.10.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Secunia Advisory ID: 11185
• ISS X-Force ID: 15570
• CVE ID: 2004-0367 (see also: NVD)
• Related OSVDB ID: 4463 4464
• CERT VU: 792286
• Keyword: enpa-sa-00013
• Vendor Specific Advisory URL: http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000835
  http://security.gentoo.org/glsa/glsa-200403-07.xml
  http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:024
  https://rhn.redhat.com/errata/RHSA-2004-137.html
• Vendor URL: http://www.ethereal.com/
• Other Advisory URL: http://www.ethereal.com/appnotes/enpa-sa-00013.html
• Generic Informational URL: http://www.ethereal.com/lists/ethereal-dev/200404/msg00296.html
• CIAC Advisory: o-105

Unknown or Incomplete