Linux Security
Linux Security
Linux Security

Debian: ethereal Buffer overflow vulnerabilities

Date 08 Jun 2004
2041
Posted By LinuxSecurity Advisories
Several buffer overflow vulnerabilities were discovered in ethereal.

Debian Security Advisory DSA 511-1                     This email address is being protected from spambots. You need JavaScript enabled to view it. 
https://www.debian.org/security/                             Matt Zimmerman
May 30th, 2004                           https://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : ethereal
Vulnerability  : buffer overflows
Problem-Type   : remote
Debian-specific: no
CVE Ids        : CAN-2004-0176 

Several buffer overflow vulnerabilities were discovered in ethereal, a
network traffic analyzer.  These vulnerabilites are described in the
ethereal advisory "enpa-sa-00013".  Of these, only some parts of
CAN-2004-0176 affect the version of ethereal in Debian woody.
CAN-2004-0367 and CAN-2004-0365 are not applicable to this version.

For the current stable distribution (woody), these problems have been
fixed in version 0.9.4-1woody7.

For the unstable distribution (sid), these problems have been fixed in
version 0.10.3-1.

We recommend that you update your ethereal package.

Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody
- --------------------------------

  Source archives:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7.dsc
      Size/MD5 checksum:      679 323c90392539e2da1279f17f6decf771
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7.diff.gz
      Size/MD5 checksum:    45483 0004ee73d2b90d02661745d3312b08e3
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4.orig.tar.gz
      Size/MD5 checksum:  3278908 42e999daa659820ee93aaaa39ea1e9ea

  Alpha architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_alpha.deb
      Size/MD5 checksum:  1941020 d79e6c8e1457cfb06c76baf19e6b5b7d
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_alpha.deb
      Size/MD5 checksum:   334382 ac866af4b9479c44c3d4d84488bde94c
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_alpha.deb
      Size/MD5 checksum:   222246 1ee88001668518dea6abdb02e7cbe55a
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_alpha.deb
      Size/MD5 checksum:  1707506 02752471daed08c9df975e9f415ac4e0

  ARM architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_arm.deb
      Size/MD5 checksum:  1635334 4adb4b8cc07457a945f1b2eeb97f6690
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_arm.deb
      Size/MD5 checksum:   297540 d7ac6d332bfef2e152337529cb83ceee
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_arm.deb
      Size/MD5 checksum:   206166 cb3005dc622ad56e73ba2dce5a53c63b
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_arm.deb
      Size/MD5 checksum:  1439432 704ee53390010698221ae05188fb6ae6

  Intel IA-32 architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_i386.deb
      Size/MD5 checksum:  1513010 7e6ba57850ffa13e38b7b8b2cd273e58
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_i386.deb
      Size/MD5 checksum:   285086 c9a7fa9eaa2eab45af8172bbfc23a070
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_i386.deb
      Size/MD5 checksum:   199306 0ea83e3dee4fa81599444cd5091d51a5
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_i386.deb
      Size/MD5 checksum:  1326436 aa569b225bd0d0e67368a73d65e29cc9

  Intel IA-64 architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_ia64.deb
      Size/MD5 checksum:  2150400 f6f32ff9881157387367660faf2b21ab
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_ia64.deb
      Size/MD5 checksum:   373176 fde622e2a2d698e8fb0d88793cf1e8d0
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_ia64.deb
      Size/MD5 checksum:   233810 a95f6ed4e1e8fe3d9d0c2f9d882dab0f
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_ia64.deb
      Size/MD5 checksum:  1861656 7846c3569c7d206aff1f1f08886673d0

  HP Precision architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_hppa.deb
      Size/MD5 checksum:  1804472 82765f65ed7430e76fb9d7f9dee0fe6a
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_hppa.deb
      Size/MD5 checksum:   322514 af524dc1735491c3b840420a9cbc0c8d
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_hppa.deb
      Size/MD5 checksum:   216956 42ca7e3e8b5c79fdd0072b9aba4bd9fe
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_hppa.deb
      Size/MD5 checksum:  1575904 a74cfa5c06002a4fd9020144b475f72d

  Motorola 680x0 architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_m68k.deb
      Size/MD5 checksum:  1424618 14a7fd43db721c403a918ec8303e6dcf
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_m68k.deb
      Size/MD5 checksum:   282804 591da6c2f59875d83c41298a02f13f1c
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_m68k.deb
      Size/MD5 checksum:   195206 0778bfba89f9a2f5584c72c28f8c7da3
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_m68k.deb
      Size/MD5 checksum:  1248686 9fc38a5b59118f8c4f13ffd8a9b9885f

  Big endian MIPS architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_mips.deb
      Size/MD5 checksum:  1617004 433296ba229444a3deb419d2f50708c9
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_mips.deb
      Size/MD5 checksum:   305342 79d872e63c188f938822a0d61f48a992
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_mips.deb
      Size/MD5 checksum:   213752 d31a8bf923fa2b34a4aabe28b3db101c
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_mips.deb
      Size/MD5 checksum:  1421942 e2ebe374ac6766a309c7d8b79269892a

  Little endian MIPS architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_mipsel.deb
      Size/MD5 checksum:  1597816 80474ae115e5c4c8cfb00f341570850f
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_mipsel.deb
      Size/MD5 checksum:   304826 50dc977f60d8dad848f19093f5ecab6e
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_mipsel.deb
      Size/MD5 checksum:   213370 c43657991fc0a7297640550c40b196c7
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_mipsel.deb
      Size/MD5 checksum:  1406348 73e84895bcc86352df38fb7bf4fe648a

  PowerPC architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_powerpc.deb
      Size/MD5 checksum:  1618208 f2f27be2f0ce2430d8ce41eeab19b9b9
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_powerpc.deb
      Size/MD5 checksum:   302004 f6e1cef517f5ab9fa455c277e9262a22
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_powerpc.deb
      Size/MD5 checksum:   208972 965e842a91a01195a86ef41a8f9ecbaa
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_powerpc.deb
      Size/MD5 checksum:  1419068 aa1cf1b5394f307ca154563a4d95087b

  IBM S/390 architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_s390.deb
      Size/MD5 checksum:  1574614 e0df6a629ac38a3c9f651eefaac6395c
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_s390.deb
      Size/MD5 checksum:   300822 1b6b348837db92604c262bd436caae50
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_s390.deb
      Size/MD5 checksum:   204054 0fc3dc9ec73c7c72f24c992424553069
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_s390.deb
      Size/MD5 checksum:  1387334 f42f341c609cfa7c5a46bbc3c7c98bfe

  Sun Sparc architecture:

     https://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_sparc.deb
      Size/MD5 checksum:  1583320 14e73331296d5be03036e93c1e792fa7
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_sparc.deb
      Size/MD5 checksum:   318104 be2b5daaf45a1dd699273abd9ed2ed15
     https://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_sparc.deb
      Size/MD5 checksum:   204810 a163c33d0e73df9956f9e8467bb5fbb2
     https://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_sparc.deb
      Size/MD5 checksum:  1389412 1997cf66066552f8e2ddd543ef060115

  These files will probably be moved into the stable distribution on
  its next revision.

- ---------------------------------------------------------------------------------
For apt-get: deb  https://security.debian.org/ stable/updates main
For dpkg-ftp:  ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
Package info: `apt-cache show ' and  https://packages.debian.org/

LinuxSecurity Poll

How frequently do you patch/update your system?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum 0 answer(s) and maximum 3 answer(s).
/main-polls/52-how-frequently-do-you-patch-update-your-system?task=poll.vote&format=json
52
radio
[{"id":"179","title":"As soon as patches\/updates are released - I track advisories for my distro(s) diligently","votes":"52","type":"x","order":"1","pct":80,"resources":[]},{"id":"180","title":"Every so often, when I think of it","votes":"8","type":"x","order":"2","pct":12.31,"resources":[]},{"id":"181","title":"Hardly ever","votes":"5","type":"x","order":"3","pct":7.69,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

Please vote first in order to view vote results.

VOTE ON THE POLL PAGE


VIEW MORE POLLS

bottom 200

Please enable / Bitte aktiviere JavaScript!
Veuillez activer / Por favor activa el Javascript![ ? ]

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.