Ethereal Bugs in Multiple Dissectors Let Remote Users Execute Arbitrary Code or Cause Denial of Service Conditions
|
|
SecurityTracker Alert ID: 1015082 |
|
SecurityTracker URL: http://securitytracker.com/id/1015082
|
|
CVE Reference:
CVE-2005-3241, CVE-2005-3242, CVE-2005-3243, CVE-2005-3244, CVE-2005-3245, CVE-2005-3246, CVE-2005-3247, CVE-2005-3248, CVE-2005-3249, CVE-2005-3184
(Links to External Site)
|
Updated: Oct 26 2005
|
Original Entry Date: Oct 19 2005
|
Impact:
Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 0.7.7 up to and including 0.10.12
|
Description:
Several vulnerabilities were reported in Ethereal. A remote user can execute arbitrary code on the target system or cause denial of service conditions on the target system.
A remote user can cause the ISAKMP, FC-FCS, RSVP, and ISIS LSP dissectors to exhaust system memory.
A remote user can cause the IrDA dissector to crash.
A remote user can trigger a buffer overflow in the SLIMP3, AgentX, and SRVLOC dissectors.
A remote user can cause the BER dissector to enter an infinite loop.
A remote user can cause the SigComp UDVM dissector to enter an infinite loop or crash.
A remote user can trigger a null pointer dereference in the SCSI, sFlow, and RTnet dissectors to cause a crash.
A remote user can trigger a divide by zero error in the X11 dissector.
A remote user can cause an invalid pointer to be freed in the WSP dissector.
If the "Dissect unknown RPC program numbers" option is enabled (not the default setting), a remote user may be able to cause the ONC RPC dissector to exhaust system memory.
If SMB transaction payload reassembly is enabled (not the default setting), a remote user can cause the SMB dissector to crash.
|
Impact:
A remote user can execute arbitrary code on the target system.
A remote user can cause Ethereal to consume excessive memory or crash.
|
Solution:
The vendor has issued a fixed version (0.10.13), available at:
http://www.ethereal.com/download.html
Red Hat has issued a fix:
https://rhn.redhat.com/errata/RHSA-2005-809.html
|
Vendor URL: www.ethereal.com/appnotes/enpa-sa-00021.html (Links to External Site)
|
Cause:
Boundary error, Input validation error, State error
|
Underlying OS:
Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 19 Oct 2005 16:41:17 -0400
Subject: Multiple problems in Ethereal versions 0.7.7 to 0.10.12
|
http://www.ethereal.com/appnotes/enpa-sa-00021.html
|
|
