Multiple Ethereal Protocol Dissector Vulnerabilities

BID:8951

Info

Multiple Ethereal Protocol Dissector Vulnerabilities

Bugtraq ID: 8951
Class: Unknown
CVE:
Remote: Yes
Local: No
Published: Nov 03 2003 12:00AM
Updated: Nov 03 2003 12:00AM
Credit: These issues were reported by the vendor.
Vulnerable: Turbolinux Turbolinux Desktop 10.0
Sun Linux 5.0.7
SGI ProPack 2.3
SGI ProPack 2.2.1
Redhat Enterprise Linux WS 3
Redhat Enterprise Linux WS 2.1
Redhat Enterprise Linux ES 3
Redhat Enterprise Linux ES 2.1
Redhat Enterprise Linux AS 3
Redhat Enterprise Linux AS 2.1
Redhat Advanced Workstation for the Itanium Processor 2.1
Mandriva Linux Mandrake 9.2
Mandriva Linux Mandrake 9.1 ppc
Mandriva Linux Mandrake 9.1
Ethereal Group Ethereal 0.9.15
Ethereal Group Ethereal 0.9.14
Ethereal Group Ethereal 0.9.13
+ Mandriva Linux Mandrake 9.1 ppc
 + Mandriva Linux Mandrake 9.1
+ Redhat Fedora Core1
 Ethereal Group Ethereal 0.9.12
Ethereal Group Ethereal 0.9.11
Ethereal Group Ethereal 0.9.10
Ethereal Group Ethereal 0.9.9
+ Mandriva Linux Mandrake 9.1 ppc
 + Mandriva Linux Mandrake 9.1
Ethereal Group Ethereal 0.9.8
+ Redhat Linux 9.0 i386
 + Redhat Linux 8.0 i386
 + Redhat Linux 8.0
+ Redhat Linux 7.3 i386
 + Redhat Linux 7.3
+ Redhat Linux 7.2 ia64
 + Redhat Linux 7.2 i386
 + Redhat Linux 7.2
+ Terra Soft Solutions Yellow Dog Linux 3.0
Ethereal Group Ethereal 0.9.7
Ethereal Group Ethereal 0.9.6
+ Conectiva Linux Enterprise Edition 1.0
Ethereal Group Ethereal 0.9.5
Ethereal Group Ethereal 0.9.4
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 Ethereal Group Ethereal 0.9.3
+ Redhat Linux 7.3 i386
 + Redhat Linux 7.3
+ Redhat Linux 7.2 i386
 + Redhat Linux 7.2 alpha
 + Redhat Linux 7.1 ia64
 + Redhat Linux 7.1 i386
 + Redhat Linux 7.1 alpha
 + Redhat Linux 7.0 sparc
 + Redhat Linux 7.0 i386
 + Redhat Linux 7.0 alpha
 + Redhat Linux 6.2 sparc
 + Redhat Linux 6.2 i386
 + Redhat Linux 6.2 alpha
 Ethereal Group Ethereal 0.9.2
Ethereal Group Ethereal 0.9.1
- Compaq Tru64 5.0
- Debian Linux 2.2 sparc
 - Debian Linux 2.2 powerpc
 - Debian Linux 2.2 IA-32
 - Debian Linux 2.2 arm
 - Debian Linux 2.2 alpha
 - Debian Linux 2.2 68k
 - HP HP-UX 11.0
- IBM AIX 5.1
 - Linux kernel 2.4
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows 98SE
- Microsoft Windows ME
- Microsoft Windows NT Workstation 4.0
 - NetBSD NetBSD 1.5
- OpenBSD OpenSSH 3.0
- SCO Unixware 7.0
- SGI IRIX 6.0
- Sun Solaris 8_sparc
 Ethereal Group Ethereal 0.9
Not Vulnerable: Ethereal Group Ethereal 0.9.16
+ Mandriva Linux Mandrake 9.2 amd64
 + Mandriva Linux Mandrake 9.2

Discussion

Multiple Ethereal Protocol Dissector Vulnerabilities

Multiple Ethereal protocol dissectors are prone to remotely exploitable vulnerabilities. The GTP, ISAKMP, MEGACO and SOCKS dissectors are affected by these issues. These issues may be exploited by causing Ethereal to process a malformed packet, either while Ethereal is monitoring live network traffic or via a packet trace. Successful exploitation could lead to code execution or denial of service attacks against Ethereal.

Exploit / POC

Multiple Ethereal Protocol Dissector Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Multiple Ethereal Protocol Dissector Vulnerabilities

Solution:
Mandrake has released an advisory (MDKSA-2003:114) to address this issue. Users who are potentially affected by this vulnerability are advised to apply relative fixes as soon as possible. Further information regarding obtaining and applying these fixes can be found in the referenced advisory. Fixes are linked below.

Turbolinux have released an advisory (TLSA-2003-64) to address this issue. Users who are potentially affected by this vulnerability are advised to apply relative fixes as soon as possible. Further information regarding obtaining and applying these fixes can be found in the referenced advisory.

Red Hat has released an advisory (RHSA-2003:324-09) that addresses this issue on Red Hat Enterprise edition Linux. Customers who are potentially affected by this vulnerability are advised to apply appropriate fixes as soon as possible. Customers can download these fixes from the Red Hat network; further information is available in the referenced advisory.

Conectiva has released advisories CLA-2003:780 and CLSA-2003:793 to address these issues. Please see the attached advisory for details on obtaining and applying fixes.

Red Hat has released a security advisory (RHSA-2003:323-01) containing fixes to address this issue. Users are advised to upgrade as soon as possible.

SGI has released an advisory (20031101-01-U) pertaining to their ProPack Linux distribution. The advisory has been released in response to a number of RHSA advisories, and includes a patch (Patch 10032) containing updated RPM packages relating to a number of different BIDS.

Patch 10032 can be obtained via the following link:
http://support.sgi.com/

For information regarding how to obtain individual RPM packages included in Patch 10032, please see the attached advisory.

Gentoo has released an advisory that includes updates for these issues. These updates may be applied with the following commands:

emerge sync
emerge '>=sys-libs/glibc-2.2.5'
emerge clean

Ethereal 0.9.16 has been released to address these issues.

RedHat has released fixes for the experimental operating system Fedora. These fixes address Ethereal Group Ethereal 0.9.13 shipped with Fedora Core1.

Sun has released fixes for Sun Linux version 5.0.7.

Debian has released security advisory DSA 407-1 to address this issue.


Ethereal Group Ethereal 0.9

Ethereal Group Ethereal 0.9.1

Ethereal Group Ethereal 0.9.10

Ethereal Group Ethereal 0.9.11

Ethereal Group Ethereal 0.9.12

Ethereal Group Ethereal 0.9.13

Ethereal Group Ethereal 0.9.14

Ethereal Group Ethereal 0.9.15

Ethereal Group Ethereal 0.9.2

Ethereal Group Ethereal 0.9.3

Ethereal Group Ethereal 0.9.4

Ethereal Group Ethereal 0.9.5

Ethereal Group Ethereal 0.9.6

Ethereal Group Ethereal 0.9.7

Ethereal Group Ethereal 0.9.8

Ethereal Group Ethereal 0.9.9

Turbolinux Turbolinux Desktop 10.0

Sun Linux 5.0.7

Mandriva Linux Mandrake 9.1 ppc

Mandriva Linux Mandrake 9.1

Mandriva Linux Mandrake 9.2

References

Multiple Ethereal Protocol Dissector Vulnerabilities

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report