Fragroute/Dsniff/Fragrouter Configure Script Trojan Horse Vulnerability

Bugtraq ID:	4898
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	May 31 2002 12:00AM
Updated:	May 31 2002 12:00AM
Credit:	Vulnerability announced by Anders Nordby <[email protected]>.
Vulnerable:	Dug Song fragrouter 1.6 Dug Song fragroute 1.2 Dug Song dsniff 2.3
Not Vulnerable:

Fragroute/Dsniff/Fragrouter Configure Script Trojan Horse Vulnerability

Solution:
The author has stated that clean versions are available. The MD5 sums are:

MD5 (dsniff-2.3.tar.gz) = 183e336a45e38013f3af840bddec44b4
MD5 (fragroute-1.2.tar.gz) = 7e4de763fae35a50e871bdcd1ac8e23a
MD5 (fragrouter-1.6.tar.gz) = 73fdc73f8da0b41b995420ded00533cc

Users are advised to install with caution.

Links are available to fragroute and dsniff downloads:


Dug Song fragroute 1.2

• Dug Song fragroute-1.2.tar.gz
  MD5: 7e4de763fae35a50e871bdcd1ac8e23a
  http://www.monkey.org/~dugsong/fragroute/fragroute-1.2.tar.gz

Dug Song dsniff 2.3

• Dug Song dsniff-2.3.tar.gz
  MD5: 183e336a45e38013f3af840bddec44b4
  http://www.monkey.org/~dugsong/dsniff/dsniff-2.3.tar.gz

Fragroute/Dsniff/Fragrouter Configure Script Trojan Horse Vulnerability

References:

• Fragroute Home Page (Dug Song)
  
• Problem Report ports/38716 (FreeBSD)