GLSA 200311-05: Ethereal: security problems in ethereal 0.9.15

http://security.gentoo.org/

Severity:	normal
Title:	Ethereal: security problems in ethereal 0.9.15
Date:	11/22/2003
Bugs:	#32691
ID:	200311-05

Synopsis

Ethereal is vulnerable to heap and buffer overflows in the GTP, ISAKMP, MEGACO, and SOCKS protocol dissectors.

Background

Ethereal is a popular network protocol analyzer.

Affected packages

Package	Vulnerable	Unaffected	Architecture(s)
net-analyzer/ethereal	< 0.9.16	>= 0.9.16	All supported architectures

Description

Ethereal contains buffer overflow vulnerabilities in the GTP, ISAKMP, and MEGACO protocol dissectors, and a heap overflow vulnerability in the SOCKS protocol dissector, which could cause Ethereal to crash or to execute arbitrary code.

Impact

A remote attacker could craft a malformed packet which would cause Ethereal to crash or run arbitrary code with the permissions of the user running Ethereal.

Workaround

There is no known workaround at this time, other than to disable the GTP, ISAKMP, MEGACO, and SOCKS protocol dissectors.

Resolution

It is recommended that all Gentoo Linux users who are running net-analyzer/ethereal 0.9.x upgrade:

    # emerge sync
    # emerge -pv '>=net-analyzer/ethereal-0.9.16'
    # emerge '>=net-analyzer/ethereal-0.9.16'
    # emerge clean

References

Ethereal Security Advisory

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200311-05.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.