Bug 109189

Summary:	CAN-2003-0925/6/7 Ethereal 0.9.13 has three exploitable security issues
Product:	Red Hat Enterprise Linux 2.1	Reporter:	Mark J. Cox <mjc>
Component:	ethereal	Assignee:	Phil Knirsch <pknirsch>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	2.1	CC:	rvokal
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://www.ethereal.com/appnotes/enpa-sa-00011.html
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2003-11-12 14:03:11 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Mark J. Cox 2003-11-05 15:27:26 UTC

Three newissues in Ethereal prior to 0.9.16 according to
http://www.ethereal.com/appnotes/enpa-sa-00011.html on Nov03

CVE applied for.

An improperly formatted GTP MSISDN string could cause a buffer
overflow in versions of Ethereal prior to 0.9.16.  

A malformed ISAKMP or MEGACO packet could make Ethereal prior to version
0.9.16 crash.  

The SOCKS dissector in Ethereal prior to version 0.9.16 is susceptible
to a heap overflow.  

This affects: 2.1AS 2.1AW 2.1ES 2.1WS 3AS 3WS 3ES

Errata RHSA-2003:324 in progress

Comment 1 Mark J. Cox 2003-11-05 17:03:55 UTC

CAN-2003-0925, CAN-2003-0926, CAN-2003-0927 respectively

Comment 2 Mark J. Cox 2003-11-12 14:03:12 UTC

An errata has been issued which should help the problem described in this bug report. 
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen 
this bug report if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2003-324.html