Debian: ethereal Buffer overflow vulnerabilities

    Date08 Jun 2004
    CategoryDebian
    1857
    Posted ByLinuxSecurity Advisories
    Several buffer overflow vulnerabilities were discovered in ethereal.
    
    Debian Security Advisory DSA 511-1                     This email address is being protected from spambots. You need JavaScript enabled to view it. 
    http://www.debian.org/security/                             Matt Zimmerman
    May 30th, 2004                           http://www.debian.org/security/faq
    - --------------------------------------------------------------------------
    
    Package        : ethereal
    Vulnerability  : buffer overflows
    Problem-Type   : remote
    Debian-specific: no
    CVE Ids        : CAN-2004-0176 
    
    Several buffer overflow vulnerabilities were discovered in ethereal, a
    network traffic analyzer.  These vulnerabilites are described in the
    ethereal advisory "enpa-sa-00013".  Of these, only some parts of
    CAN-2004-0176 affect the version of ethereal in Debian woody.
    CAN-2004-0367 and CAN-2004-0365 are not applicable to this version.
    
    For the current stable distribution (woody), these problems have been
    fixed in version 0.9.4-1woody7.
    
    For the unstable distribution (sid), these problems have been fixed in
    version 0.10.3-1.
    
    We recommend that you update your ethereal package.
    
    Upgrade Instructions
    - --------------------
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    Debian GNU/Linux 3.0 alias woody
    - --------------------------------
    
      Source archives:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7.dsc
          Size/MD5 checksum:      679 323c90392539e2da1279f17f6decf771
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7.diff.gz
          Size/MD5 checksum:    45483 0004ee73d2b90d02661745d3312b08e3
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4.orig.tar.gz
          Size/MD5 checksum:  3278908 42e999daa659820ee93aaaa39ea1e9ea
    
      Alpha architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_alpha.deb
          Size/MD5 checksum:  1941020 d79e6c8e1457cfb06c76baf19e6b5b7d
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_alpha.deb
          Size/MD5 checksum:   334382 ac866af4b9479c44c3d4d84488bde94c
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_alpha.deb
          Size/MD5 checksum:   222246 1ee88001668518dea6abdb02e7cbe55a
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_alpha.deb
          Size/MD5 checksum:  1707506 02752471daed08c9df975e9f415ac4e0
    
      ARM architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_arm.deb
          Size/MD5 checksum:  1635334 4adb4b8cc07457a945f1b2eeb97f6690
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_arm.deb
          Size/MD5 checksum:   297540 d7ac6d332bfef2e152337529cb83ceee
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_arm.deb
          Size/MD5 checksum:   206166 cb3005dc622ad56e73ba2dce5a53c63b
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_arm.deb
          Size/MD5 checksum:  1439432 704ee53390010698221ae05188fb6ae6
    
      Intel IA-32 architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_i386.deb
          Size/MD5 checksum:  1513010 7e6ba57850ffa13e38b7b8b2cd273e58
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_i386.deb
          Size/MD5 checksum:   285086 c9a7fa9eaa2eab45af8172bbfc23a070
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_i386.deb
          Size/MD5 checksum:   199306 0ea83e3dee4fa81599444cd5091d51a5
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_i386.deb
          Size/MD5 checksum:  1326436 aa569b225bd0d0e67368a73d65e29cc9
    
      Intel IA-64 architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_ia64.deb
          Size/MD5 checksum:  2150400 f6f32ff9881157387367660faf2b21ab
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_ia64.deb
          Size/MD5 checksum:   373176 fde622e2a2d698e8fb0d88793cf1e8d0
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_ia64.deb
          Size/MD5 checksum:   233810 a95f6ed4e1e8fe3d9d0c2f9d882dab0f
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_ia64.deb
          Size/MD5 checksum:  1861656 7846c3569c7d206aff1f1f08886673d0
    
      HP Precision architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_hppa.deb
          Size/MD5 checksum:  1804472 82765f65ed7430e76fb9d7f9dee0fe6a
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_hppa.deb
          Size/MD5 checksum:   322514 af524dc1735491c3b840420a9cbc0c8d
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_hppa.deb
          Size/MD5 checksum:   216956 42ca7e3e8b5c79fdd0072b9aba4bd9fe
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_hppa.deb
          Size/MD5 checksum:  1575904 a74cfa5c06002a4fd9020144b475f72d
    
      Motorola 680x0 architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_m68k.deb
          Size/MD5 checksum:  1424618 14a7fd43db721c403a918ec8303e6dcf
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_m68k.deb
          Size/MD5 checksum:   282804 591da6c2f59875d83c41298a02f13f1c
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_m68k.deb
          Size/MD5 checksum:   195206 0778bfba89f9a2f5584c72c28f8c7da3
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_m68k.deb
          Size/MD5 checksum:  1248686 9fc38a5b59118f8c4f13ffd8a9b9885f
    
      Big endian MIPS architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_mips.deb
          Size/MD5 checksum:  1617004 433296ba229444a3deb419d2f50708c9
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_mips.deb
          Size/MD5 checksum:   305342 79d872e63c188f938822a0d61f48a992
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_mips.deb
          Size/MD5 checksum:   213752 d31a8bf923fa2b34a4aabe28b3db101c
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_mips.deb
          Size/MD5 checksum:  1421942 e2ebe374ac6766a309c7d8b79269892a
    
      Little endian MIPS architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_mipsel.deb
          Size/MD5 checksum:  1597816 80474ae115e5c4c8cfb00f341570850f
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_mipsel.deb
          Size/MD5 checksum:   304826 50dc977f60d8dad848f19093f5ecab6e
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_mipsel.deb
          Size/MD5 checksum:   213370 c43657991fc0a7297640550c40b196c7
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_mipsel.deb
          Size/MD5 checksum:  1406348 73e84895bcc86352df38fb7bf4fe648a
    
      PowerPC architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_powerpc.deb
          Size/MD5 checksum:  1618208 f2f27be2f0ce2430d8ce41eeab19b9b9
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_powerpc.deb
          Size/MD5 checksum:   302004 f6e1cef517f5ab9fa455c277e9262a22
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_powerpc.deb
          Size/MD5 checksum:   208972 965e842a91a01195a86ef41a8f9ecbaa
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_powerpc.deb
          Size/MD5 checksum:  1419068 aa1cf1b5394f307ca154563a4d95087b
    
      IBM S/390 architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_s390.deb
          Size/MD5 checksum:  1574614 e0df6a629ac38a3c9f651eefaac6395c
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_s390.deb
          Size/MD5 checksum:   300822 1b6b348837db92604c262bd436caae50
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_s390.deb
          Size/MD5 checksum:   204054 0fc3dc9ec73c7c72f24c992424553069
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_s390.deb
          Size/MD5 checksum:  1387334 f42f341c609cfa7c5a46bbc3c7c98bfe
    
      Sun Sparc architecture:
    
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody7_sparc.deb
          Size/MD5 checksum:  1583320 14e73331296d5be03036e93c1e792fa7
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody7_sparc.deb
          Size/MD5 checksum:   318104 be2b5daaf45a1dd699273abd9ed2ed15
         http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody7_sparc.deb
          Size/MD5 checksum:   204810 a163c33d0e73df9956f9e8467bb5fbb2
         http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody7_sparc.deb
          Size/MD5 checksum:  1389412 1997cf66066552f8e2ddd543ef060115
    
      These files will probably be moved into the stable distribution on
      its next revision.
    
    - ---------------------------------------------------------------------------------
    For apt-get: deb  http://security.debian.org/ stable/updates main
    For dpkg-ftp:  ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Package info: `apt-cache show ' and  http://packages.debian.org/
    
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"5","type":"x","order":"1","pct":55.56,"resources":[]},{"id":"88","title":"Should be more technical","votes":"3","type":"x","order":"2","pct":33.33,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"1","type":"x","order":"3","pct":11.11,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    Advisories

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.