Bug 164243 - CAN-2005-2360 Multiple ethereal flaws (CAN-2005-2361 CAN-2005-2362 CAN-2005-2363 CAN-2005-2364 CAN-2005-2365 CAN-2005-2366 CAN-2005-2367)
Summary: CAN-2005-2360 Multiple ethereal flaws (CAN-2005-2361 CAN-2005-2362 CAN-2005-2...
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: ethereal
Version: 4.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
: ---
Assignee: Radek Vokal
QA Contact:
URL:
Whiteboard: impact=moderate,embargo=20050727,repo...
Keywords: Security
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-07-26 07:36 UTC by Mark J. Cox
Modified: 2007-11-30 22:07 UTC (History)
1 user (show)

(edit)
Clone Of:
(edit)
Last Closed: 2005-08-10 17:36:19 UTC


Attachments (Terms of Use)
Description of flaws (3.00 KB, text/plain)
2005-07-26 07:36 UTC, Mark J. Cox
no flags Details


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2005:687 normal SHIPPED_LIVE Moderate: ethereal security update 2005-08-10 04:00:00 UTC

Description Mark J. Cox 2005-07-26 07:36:56 UTC
Gerarld Combs notified us of a number of flaws fixed in Ethereal 0.10.12, due
out on 20050726 or 20050727.  The majority of these can cause ethereal to crash
or get stuck in a loop (impact=)

However there are two issues that could have a higher impact, but these will
need investigation to determine the consequences:

  The SMB dissector could overflow a buffer or exhaust system memory.
  Versions affected: 0.9.0 to 0.10.11
  Fixed in: 14501, 14515, 14526

  Several dissectors were susceptible to a format string overflow.
  Versions affected: 0.9.4 to 0.10.11
  Fixed in: 14713

http://anonsvn.ethereal.com/viewcvs/viewcvs.py?rev=14713&view=rev
http://anonsvn.ethereal.com/viewcvs/viewcvs.py?rev=14501&view=rev
http://anonsvn.ethereal.com/viewcvs/viewcvs.py?rev=14515&view=rev
http://anonsvn.ethereal.com/viewcvs/viewcvs.py?rev=14526&view=rev

List of issues attached.  Marking bug embargoed until Ethereal release.

Affects RHEL4, RHEL3, RHEL2.1

Comment 1 Mark J. Cox 2005-07-26 07:36:56 UTC
Created attachment 117144 [details]
Description of flaws

Comment 2 Mark J. Cox 2005-07-26 07:38:59 UTC
(crashes are impact=low, the two issues above are impact=moderate)

Comment 4 Mark J. Cox 2005-07-29 08:30:29 UTC
removing embargo

Comment 5 Jindrich Novy 2005-08-03 12:53:23 UTC
Fix is now applied in RHSA-2005:687.

Comment 6 Red Hat Bugzilla 2005-08-10 17:36:19 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2005-687.html



Note You need to log in before you can comment on or make changes to this bug.