Ethereal SPNEGO Dissector Denial Of Service Vulnerability

Bugtraq ID:	7879
Class:	Boundary Condition Error
CVE:	CVE-2003-0430
Remote:	Yes
Local:	No
Published:	Jun 11 2003 12:00AM
Updated:	Jul 11 2009 10:06PM
Credit:	Discovery of this vulnerability credited to Timo Sirainen.
Vulnerable:	SCO OpenLinux Workstation 3.1.1 SCO OpenLinux Server 3.1.1 Redhat Linux Advanced Work Station 2.1 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 2.1 Ethereal Group Ethereal 0.9.12 Ethereal Group Ethereal 0.9.11 Ethereal Group Ethereal 0.9.10 Ethereal Group Ethereal 0.9.9 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 Ethereal Group Ethereal 0.9.8 + Redhat Linux 9.0 i386 + Redhat Linux 8.0 i386 + Redhat Linux 8.0 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 + Terra Soft Solutions Yellow Dog Linux 3.0 Ethereal Group Ethereal 0.9.7 Ethereal Group Ethereal 0.9.6 + Conectiva Linux Enterprise Edition 1.0 Ethereal Group Ethereal 0.9.5 Ethereal Group Ethereal 0.9.4 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha Ethereal Group Ethereal 0.9.3 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 alpha + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.0 sparc + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha Ethereal Group Ethereal 0.9.2 Ethereal Group Ethereal 0.9.1 - Compaq Tru64 5.0 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - HP HP-UX 11.0 - IBM AIX 5.1 - Linux kernel 2.4 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - NetBSD NetBSD 1.5 - OpenBSD OpenSSH 3.0 - SCO Unixware 7.0 - SGI IRIX 6.0 - Sun Solaris 8_sparc Ethereal Group Ethereal 0.9
Not Vulnerable:	Ethereal Group Ethereal 0.9.13 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 + Redhat Fedora Core1

Ethereal SPNEGO Dissector Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Ethereal SPNEGO Dissector Denial Of Service Vulnerability

Solution:
SCO have released an advisory (CSSA-2003-030.0) and fixes to address this issue. Affected users are advised to install the appropriate fix as soon as possible. Further information regarding the application of these fixes can be found in the referenced advisory. Fixes are linked below.

Conectiva has released a security advisory (CLSA-2003:719) and fixes to address this issue. Users are advised to upgrade as soon as possible.

Red Hat has released a security advisory (RHSA-2003:077-13) containing fixes which address this and other issues with ethereal. See referenced advisory for further details on obtaining and applying fixes.

Conectiva has released a security advisory (CLA-2003:662) and fixes to address this issue. Users are advised to upgrade as soon as possible.

Ethereal 0.9.13 is not vulnerable to this issue. Affected users are advised to upgrade to the newest version of Ethereal.

Red Hat has released upgraded RPMs which correct this vulnerability. Please see advisory RHSA-2003:203-01 (references section) for download links.

Updates are available for Yellow Dog Linux. These updates can be applied manually or by issuing the following command:

yum update ethereal


Ethereal Group Ethereal 0.9

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.1

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.10

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.11

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.12

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.2

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.3

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.4

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.5

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.6

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.7

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

Ethereal Group Ethereal 0.9.8

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz


• Yellow Dog ethereal-0.9.13-1.90.1a.ppc.rpm
  ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-3.0/ppc/e thereal-0.9.13-1.90.1a.ppc.rpm


• Yellow Dog ethereal-gnome-0.9.13-1.90.1a.ppc.rpm
  ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-3.0/ppc/e thereal-gnome-0.9.13-1.90.1a.ppc.rpm

Ethereal Group Ethereal 0.9.9

• Ethereal Group ethereal-0.9.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.13.tar.gz

SCO OpenLinux Server 3.1.1

• SCO ethereal-0.9.13-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2003-030.0/R PMS/ethereal-0.9.13-1.i386.rpm

SCO OpenLinux Workstation 3.1.1

• SCO ethereal-0.9.13-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2003-03 0.0/RPMS/ethereal-0.9.13-1.i386.rpm

Ethereal SPNEGO Dissector Denial Of Service Vulnerability

References:

• CLSA-2003:719 ethereal (Conectiva)
  
• RHSA-2003:077-13 Updated Ethereal packages fix security issues (Red Hat)
  
• Several security problems in Ethereal 0.9.12 (Ethereal Group)
  
• YDU-20030718-2 Updated ethereal packages are available. (Yellow Dog)