Ethereal Multiple Dissector One Byte Buffer Overflow Vulnerabilities

Bugtraq ID:	7493
Class:	Boundary Condition Error
CVE:	CVE-2003-0356
Remote:	Yes
Local:	No
Published:	May 03 2003 12:00AM
Updated:	Jul 11 2009 09:07PM
Credit:	Discovery of these issues credited to Timo Sirainen.
Vulnerable:	Redhat Linux Advanced Work Station 2.1 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 2.1 Ethereal Group Ethereal 0.9.11 Ethereal Group Ethereal 0.9.10 Ethereal Group Ethereal 0.9.9 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 Ethereal Group Ethereal 0.9.8 + Redhat Linux 9.0 i386 + Redhat Linux 8.0 i386 + Redhat Linux 8.0 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 + Terra Soft Solutions Yellow Dog Linux 3.0 Ethereal Group Ethereal 0.9.7 Ethereal Group Ethereal 0.9.6 + Conectiva Linux Enterprise Edition 1.0 Ethereal Group Ethereal 0.9.5 Ethereal Group Ethereal 0.9.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha Ethereal Group Ethereal 0.9.3 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 alpha + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.0 sparc + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha Ethereal Group Ethereal 0.9.2 Ethereal Group Ethereal 0.9.1 - Compaq Tru64 5.0 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - HP HP-UX 11.0 - IBM AIX 5.1 - Linux kernel 2.4 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - NetBSD NetBSD 1.5 - OpenBSD OpenSSH 3.0 - SCO Unixware 7.0 - SGI IRIX 6.0 - Sun Solaris 8_sparc Ethereal Group Ethereal 0.9 Ethereal Group Ethereal 0.8.18 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.2 Ethereal Group Ethereal 0.8 + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 IA-32 + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + Debian Linux 2.2
Not Vulnerable:	Ethereal Group Ethereal 0.9.12

Ethereal Multiple Dissector One Byte Buffer Overflow Vulnerabilities

Several dissectors included with Ethereal are vulnerable to buffer overflow conditions. Exploitation of this issue will allow an attacker to overflow memory buffers by one byte.

This vulnerability affects Ethereal 0.9.11 and earlier.

Ethereal Multiple Dissector One Byte Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Ethereal Multiple Dissector One Byte Buffer Overflow Vulnerabilities

Solution:
Red Hat has released a security advisory (RHSA-2003:077-13) containing fixes which address this and other issues with ethereal. See referenced advisory for further details on obtaining and applying fixes.

Debian has released an advisory (DSA 313-1) containing fixes to address this issue.

Ethereal 0.9.12 is not vulnerable to this issue. Users are advised to upgrade.

Red Hat has released upgraded RPMs which correct this vulnerability. Please see advisory RHSA-2003:203-01 (references section) for download links.

Updates are available for Yellow Dog Linux. These updates can be applied manually or by issuing the following command:

yum update ethereal


Ethereal Group Ethereal 0.8

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.8.18

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.1

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.10

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.11

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.2

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.3

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.4

• Debian ethereal-common_0.9.4-1woody4_alpha.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_alpha.deb


• Debian ethereal-common_0.9.4-1woody4_arm.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_arm.deb


• Debian ethereal-common_0.9.4-1woody4_hppa.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_hppa.deb


• Debian ethereal-common_0.9.4-1woody4_i386.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_i386.deb


• Debian ethereal-common_0.9.4-1woody4_ia64.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_ia64.deb


• Debian ethereal-common_0.9.4-1woody4_m68k.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_m68k.deb


• Debian ethereal-common_0.9.4-1woody4_mips.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_mips.deb


• Debian ethereal-common_0.9.4-1woody4_mipsel.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_mipsel.deb


• Debian ethereal-common_0.9.4-1woody4_powerpc.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_powerpc.deb


• Debian ethereal-common_0.9.4-1woody4_s390.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_s390.deb


• Debian ethereal-common_0.9.4-1woody4_sparc.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo n_0.9.4-1woody4_sparc.deb


• Debian ethereal-dev_0.9.4-1woody4_alpha.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_alpha.deb


• Debian ethereal-dev_0.9.4-1woody4_arm.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_arm.deb


• Debian ethereal-dev_0.9.4-1woody4_hppa.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_hppa.deb


• Debian ethereal-dev_0.9.4-1woody4_i386.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_i386.deb


• Debian ethereal-dev_0.9.4-1woody4_ia64.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_ia64.deb


• Debian ethereal-dev_0.9.4-1woody4_m68k.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_m68k.deb


• Debian ethereal-dev_0.9.4-1woody4_mips.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_mips.deb


• Debian ethereal-dev_0.9.4-1woody4_mipsel.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_mipsel.deb


• Debian ethereal-dev_0.9.4-1woody4_powerpc.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_powerpc.deb


• Debian ethereal-dev_0.9.4-1woody4_s390.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_s390.deb


• Debian ethereal-dev_0.9.4-1woody4_sparc.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0 .9.4-1woody4_sparc.deb


• Debian ethereal_0.9.4-1woody4_alpha.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_alpha.deb


• Debian ethereal_0.9.4-1woody4_arm.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_arm.deb


• Debian ethereal_0.9.4-1woody4_hppa.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_hppa.deb


• Debian ethereal_0.9.4-1woody4_i386.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_i386.deb


• Debian ethereal_0.9.4-1woody4_ia64.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_ia64.deb


• Debian ethereal_0.9.4-1woody4_m68k.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_m68k.deb


• Debian ethereal_0.9.4-1woody4_mips.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_mips.deb


• Debian ethereal_0.9.4-1woody4_mipsel.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_mipsel.deb


• Debian ethereal_0.9.4-1woody4_powerpc.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_powerpc.deb


• Debian ethereal_0.9.4-1woody4_s390.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_s390.deb


• Debian ethereal_0.9.4-1woody4_sparc.deb
  http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4 -1woody4_sparc.deb


• Debian tethereal_0.9.4-1woody4_alpha.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_alpha.deb


• Debian tethereal_0.9.4-1woody4_arm.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_arm.deb


• Debian tethereal_0.9.4-1woody4_hppa.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_hppa.deb


• Debian tethereal_0.9.4-1woody4_i386.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_i386.deb


• Debian tethereal_0.9.4-1woody4_ia64.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_ia64.deb


• Debian tethereal_0.9.4-1woody4_m68k.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_m68k.deb


• Debian tethereal_0.9.4-1woody4_mips.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_mips.deb


• Debian tethereal_0.9.4-1woody4_mipsel.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_mipsel.deb


• Debian tethereal_0.9.4-1woody4_powerpc.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_powerpc.deb


• Debian tethereal_0.9.4-1woody4_s390.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_s390.deb


• Debian tethereal_0.9.4-1woody4_sparc.deb
  http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9. 4-1woody4_sparc.deb


• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.5

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.6

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.7

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz

Ethereal Group Ethereal 0.9.8

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz


• Yellow Dog ethereal-0.9.13-1.90.1a.ppc.rpm
  ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-3.0/ppc/e thereal-0.9.13-1.90.1a.ppc.rpm


• Yellow Dog ethereal-gnome-0.9.13-1.90.1a.ppc.rpm
  ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-3.0/ppc/e thereal-gnome-0.9.13-1.90.1a.ppc.rpm

Ethereal Group Ethereal 0.9.9

• Ethereal Group ethereal-0.9.12.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz


• Mandrake ethereal-0.9.12-1.2mdk.i586.rpm
  Mandrake Linux 9.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ethereal-0.9.12-1.2mdk.ppc.rpm
  Mandrake Linux 9.1/PPC
  http://www.mandrakesecure.net/en/ftp.php

Ethereal Multiple Dissector One Byte Buffer Overflow Vulnerabilities

References:

• Off-by-one and integer overflows in Ethereal 0.9.11 (Ethereal Group)
  
• RHSA-2003:077-13 Updated Ethereal packages fix security issues (Red Hat)
  
• YDU-20030718-2 Updated ethereal packages are available. (Yellow Dog)