Full Disclosure: !ADVISORY! # =Thu Mar 16 14:19:19 EST 2006= # Directory Transversal in Ethereal

[the.soylent <the.soylent () gmail com>]

!ADVISORY! # =Thu Mar 16 14:19:19 EST 2006= # Directory Transversal in Ethereal




8=============D~~~~~~~~~~~~~
[+] Background
8=============D~~~~~~~~~~~~~
There is no background.
8=============D~~~~~~~~~~~~~
[+] Description
8=============D~~~~~~~~~~~~~
Remote exploitation of a directory traversal vulnerability in Ethereal could allow attackers to overwrite or view 
arbitrary files with user-supplied contents.

8=============D~~~~~~~~~~~~~
[+] History
8=============D~~~~~~~~~~~~~
2-23-2006 [+] Vendor Notification.
1-22-2006 [+] Vendor Reply.
3-16-2006 [+] Public Disclosure.
8=============D~~~~~~~~~~~~~
[+] Vendor Response
8=============D~~~~~~~~~~~~~
Ethereal has presented no identified information regarding this vulnerability in question.
8=============D~~~~~~~~~~~~~
[+] CVE Information
8=============D~~~~~~~~~~~~~
The Common Vulnerabilities and Exposures (CVE) project has assigned the name CVE-2006-784643 to this issue

8=============D~~~~~~~~~~~~~
Appendix A Vendor Information
8=============D~~~~~~~~~~~~~
http://www.ethereal.com/



8=============D~~~~~~~~~~~~~
Contact
8=============D~~~~~~~~~~~~~
the.soylent the.soylent () gmail com

GSAE CEH CSFA SSP-MPA GIPS GHTQ GWAS CAP SSCP 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/