Fedora Core 2: FEDORA-2004-220 Critical: Ethereal DoS Resolved

Ethereal is a network traffic analyzer for Unix-ish operating systems.

This package lays base for libpcap, a packet capture and filtering

library, contains command-line utilities, contains plugins and

documentation for ethereal. A graphical user interface is packaged

separately to GTK+ package.

Ethereal is a network traffic analyzer for Unix-ish operating systems.

This package lays base for libpcap, a packet capture and filtering

library, contains command-line utilities, contains plugins and

documentation for ethereal. A graphical user interface is packaged

separately to GTK+ package.

Issues have been discovered in the following protocol dissectors:

* The iSNS dissector could make Ethereal abort in some cases. (0.10.3 - 0.10.4) CAN-2004-0633 * SMB SID snooping could crash if there was no policy name for a handle. (0.9.15 - 0.10.4) CAN-2004-0634 * The SNMP dissector could crash due to a malformed or missing community string. (0.8.15 - 0.10.4) CAN-2004-0635

Impact:

It may be possible to make Ethereal crash or run arbitrary code by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Resolution:

Upgrade to 0.10.5.

If you are running a version prior to 0.10.5 and you cannot upgrade, you can disable all of the protocol dissectors listed above by selecting Analyze->Enabled Protocols... and deselecting them from the list. For SMB, you can alternatively disable SID snooping in the SMB protocol preferences. However, it is strongly recommended that you up...