SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   Wireshark Vendors:   Wireshark.org
(Mandrake Issues Fix) Ethereal Buffer Overflows and Other Bugs in Etheric, GPRS-LLC, 3GPP2 A11, IAPP, JXTA, and sFlow Dissectors Let Remote Users Crash the Process or Execute Arbitrary Code
SecurityTracker Alert ID:  1013441
SecurityTracker URL:  http://securitytracker.com/id/1013441
CVE Reference:   CVE-2005-0699, CVE-2005-0704, CVE-2005-0705, CVE-2005-0739   (Links to External Site)
Date:  Mar 16 2005
Impact:   Denial of service via network, Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 0.9.1 - 0.10.9
Description:   Several vulnerabilities were reported in Ethereal in the Etheric, GPRS-LLC, 3GPP2 A11, IAPP, JXTA, and sFlow dissectors. A remote user can cause the process to crash or execute arbitrary code.

A buffer overflow exists in the Etheric dissector in versions 0.10.7 through 0.10.9 [CVE: CVE-2005-0704].

If the 'ignore cipher bit' option is enabled, a remote user can cause the GPRS-LLC dissector to crash [CVE: CVE-2005-0705]. Versions 0.10.7 through 0.10.9 are affected.

A buffer overflow exists in the 3GPP2 A11 dissector in versions 0.10.3 through 0.10.9 [CVE: CVE-2005-0699].

A buffer overflow exists in the IAPP dissector [CVE: CVE-2005-0739]. Versions 0.9.1 through 0.10.9 are affected.

A vulnerability exists in the JXTA dissector allows a remote user to crash Ethereal. Only version 0.10.9 is vulnerable.

A bug in the sFlow dissector allows a remote user to cause Ethereal to crash. Versions 0.9.14 through 0.10.9 are affected.

Matevz Pustisek, Diego Giago, Leon Juranic, and others discovered these vulnerabilities.

Impact:   A remote user can cause the process to crash or execute arbitrary code.
Solution:   Mandrake has released a fix.

Mandrakelinux 10.0:
fb966151e94dac463d403f350fb00fa7 10.0/RPMS/ethereal-0.10.10-0.1.100mdk.i586.rpm
b7c41bee5ad00b0b404e2981c561c4ec 10.0/SRPMS/ethereal-0.10.10-0.1.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:
7d3efb484e1b370b13d506114bc0407c amd64/10.0/RPMS/ethereal-0.10.10-0.1.100mdk.amd64.rpm
b7c41bee5ad00b0b404e2981c561c4ec amd64/10.0/SRPMS/ethereal-0.10.10-0.1.100mdk.src.rpm

Mandrakelinux 10.1:
6d32ba4fec2e8f9619244c17295ede7e 10.1/RPMS/ethereal-0.10.10-0.1.101mdk.i586.rpm
89a0d8446a64927232a36c2971eef4c8 10.1/RPMS/ethereal-tools-0.10.10-0.1.101mdk.i586.rpm
c11201abc7040579f35b68c2b29edaee 10.1/RPMS/libethereal0-0.10.10-0.1.101mdk.i586.rpm
a867076452de57b9536260e646b27209 10.1/RPMS/tethereal-0.10.10-0.1.101mdk.i586.rpm
383c4e2a2a2fec1574c63a1eaeb658c5 10.1/SRPMS/ethereal-0.10.10-0.1.101mdk.src.rpm

Mandrakelinux 10.1/X86_64:
ca5d62812d64b98898c9582907aee602 x86_64/10.1/RPMS/ethereal-0.10.10-0.1.101mdk.x86_64.rpm
27f88f8e04f78f470ce4579183cbc0c6 x86_64/10.1/RPMS/ethereal-tools-0.10.10-0.1.101mdk.x86_64.rpm
155e92c6ef477eb93132107ef7146083 x86_64/10.1/RPMS/lib64ethereal0-0.10.10-0.1.101mdk.x86_64.rpm
4eb06c4832cc4490ea000e4d0ff60f7b x86_64/10.1/RPMS/tethereal-0.10.10-0.1.101mdk.x86_64.rpm
383c4e2a2a2fec1574c63a1eaeb658c5 x86_64/10.1/SRPMS/ethereal-0.10.10-0.1.101mdk.src.rpm

Vendor URL:  www.ethereal.com/appnotes/enpa-sa-00018.html (Links to External Site)
Cause:   Boundary error
Underlying OS:  Linux (Mandriva/Mandrake)
Underlying OS Comments:  10.0, 10.1

Message History:   This archive entry is a follow-up to the message listed below.
Mar 12 2005 Ethereal Buffer Overflows and Other Bugs in Etheric, GPRS-LLC, 3GPP2 A11, IAPP, JXTA, and sFlow Dissectors Let Remote Users Crash the Process or Execute Arbitrary Code



 Source Message Contents

Subject:  [Security Announce] MDKSA-2005:053 - Updated ethereal packages


This is a multi-part message in MIME format...

------------=_1110931771-593-3218

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

                 Mandrakelinux Security Update Advisory
 _______________________________________________________________________

 Package name:           ethereal
 Advisory ID:            MDKSA-2005:053
 Date:                   March 15th, 2005

 Affected versions:	 10.0, 10.1
 ______________________________________________________________________

 Problem Description:

 A number of issues were discovered in Ethereal versions prior to
 0.10.10, which is provided by this update.  Matevz Pustisek discovered
 a buffer overflow in the Etheric dissector (CAN-2005-0704); the
 GPRS-LLC dissector could crash if the "ignore cipher bit" was enabled
 (CAN-2005-0705); Diego Giago found a buffer overflow in the 3GPP2 A11
 dissector (CAN-2005-0699); Leon Juranic found a buffer overflow in the
 IAPP dissector (CAN-2005-0739); and bugs in the JXTA and sFlow
 dissectors could make Ethereal crash.
 _______________________________________________________________________

 References:

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0699
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0704
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0705
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0739
  http://www.ethereal.com/appnotes/enpa-sa-00018.html
 ______________________________________________________________________

 Updated Packages:
  
 Mandrakelinux 10.0:
 fb966151e94dac463d403f350fb00fa7  10.0/RPMS/ethereal-0.10.10-0.1.100mdk.i586.rpm
 b7c41bee5ad00b0b404e2981c561c4ec  10.0/SRPMS/ethereal-0.10.10-0.1.100mdk.src.rpm

 Mandrakelinux 10.0/AMD64:
 7d3efb484e1b370b13d506114bc0407c  amd64/10.0/RPMS/ethereal-0.10.10-0.1.100mdk.amd64.rpm
 b7c41bee5ad00b0b404e2981c561c4ec  amd64/10.0/SRPMS/ethereal-0.10.10-0.1.100mdk.src.rpm

 Mandrakelinux 10.1:
 6d32ba4fec2e8f9619244c17295ede7e  10.1/RPMS/ethereal-0.10.10-0.1.101mdk.i586.rpm
 89a0d8446a64927232a36c2971eef4c8  10.1/RPMS/ethereal-tools-0.10.10-0.1.101mdk.i586.rpm
 c11201abc7040579f35b68c2b29edaee  10.1/RPMS/libethereal0-0.10.10-0.1.101mdk.i586.rpm
 a867076452de57b9536260e646b27209  10.1/RPMS/tethereal-0.10.10-0.1.101mdk.i586.rpm
 383c4e2a2a2fec1574c63a1eaeb658c5  10.1/SRPMS/ethereal-0.10.10-0.1.101mdk.src.rpm

 Mandrakelinux 10.1/X86_64:
 ca5d62812d64b98898c9582907aee602  x86_64/10.1/RPMS/ethereal-0.10.10-0.1.101mdk.x86_64.rpm
 27f88f8e04f78f470ce4579183cbc0c6  x86_64/10.1/RPMS/ethereal-tools-0.10.10-0.1.101mdk.x86_64.rpm
 155e92c6ef477eb93132107ef7146083  x86_64/10.1/RPMS/lib64ethereal0-0.10.10-0.1.101mdk.x86_64.rpm
 4eb06c4832cc4490ea000e4d0ff60f7b  x86_64/10.1/RPMS/tethereal-0.10.10-0.1.101mdk.x86_64.rpm
 383c4e2a2a2fec1574c63a1eaeb658c5  x86_64/10.1/SRPMS/ethereal-0.10.10-0.1.101mdk.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrakeUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandrakesoft for security.  You can obtain
 the GPG public key of the Mandrakelinux Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandrakelinux at:

  http://www.mandrakesoft.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_linux-mandrake.com

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Linux Mandrake Security Team
  <security linux-mandrake.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFCN2zWmqjQ0CJFipgRAsOjAJ9BrJNRzKeIZXuY1vRJXJ1irh0swgCg9V4V
UxCS39TrEtvgt3gdNaRPieE=
=aQDG
-----END PGP SIGNATURE-----


------------=_1110931771-593-3218
Content-Type: text/plain; name="message.footer"
Content-Disposition: inline; filename="message.footer"
Content-Transfer-Encoding: 8bit

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

------------=_1110931771-593-3218--

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC