[Full-Disclosure] MDKSA-2003:114 - Updated ethereal packages fix multiple remotely exploitable vulnerabilities

From: Mandrake Linux Security Team (security_at_linux-mandrake.com)
Date: 12/11/03

  • Next message: Michal Zalewski: "[Full-Disclosure] A new TCP/IP blind data injection technique?" 
    To: full-disclosure@lists.netsys.com
Date: 10 Dec 2003 23:27:31 -0000

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

     _______________________________________________________________________

                    Mandrake Linux Security Update Advisory
     _______________________________________________________________________

     Package name: ethereal
     Advisory ID: MDKSA-2003:114
     Date: December 10th, 2003

     Affected versions: 9.1, 9.2
     ______________________________________________________________________

     Problem Description:

     A number of vulnerabilities were discovered in ethereal that, if
     exploited, could be used to make ethereal crash or run arbitrary code
     by injecting malicious malformed packets onto the wire or by
     convincing someone to read a malformed packet trace file.
     
     A buffer overflow allows attackers to cause a DoS (Denial of Service)
     and possibly execute arbitrary code using a malformed GTP MSISDN
     string (CAN-2003-0925).
     
     Likewise, a DoS can be caused by using malformed ISAKMP or MEGACO
     packets (CAN-2003-0926).
     
     Finally, a heap-based buffer overflow allows attackers to cause a DoS
     or execute arbitrary code using the SOCKS dissector (CAN-2003-0927).
     
     All three vulnerabilities affect all versions of Ethereal up to and
     including 0.9.15. This update provides 0.9.16 which corrects all of
     these issues. Also note that each vulnerability can be exploited by
     a remote attacker.
     _______________________________________________________________________

     References:

      http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0925
      http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0926
      http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0927
      http://www.ethereal.com/appnotes/enpa-sa-00011.html
     ______________________________________________________________________

     Updated Packages:
      
     Mandrake Linux 9.1:
     6f7a55137bfe58e52ac26c7a1555117d 9.1/RPMS/ethereal-0.9.16-2.1.91mdk.i586.rpm
     58ba4528b16ee80cfbbd6ab6a881f6ed 9.1/SRPMS/ethereal-0.9.16-2.1.91mdk.src.rpm

     Mandrake Linux 9.1/PPC:
     db5ae031a844f1dea0c9d4329f54c487 ppc/9.1/RPMS/ethereal-0.9.16-2.1.91mdk.ppc.rpm
     58ba4528b16ee80cfbbd6ab6a881f6ed ppc/9.1/SRPMS/ethereal-0.9.16-2.1.91mdk.src.rpm

     Mandrake Linux 9.2:
     f88623242a1f28900a073c6b205e8f67 9.2/RPMS/ethereal-0.9.16-2.1.92mdk.i586.rpm
     3be53a6f83092086aa74d3334e4e1133 9.2/SRPMS/ethereal-0.9.16-2.1.92mdk.src.rpm
     _______________________________________________________________________

     To upgrade automatically use MandrakeUpdate or urpmi. The verification
     of md5 checksums and GPG signatures is performed automatically for you.

     A list of FTP mirrors can be obtained from:

      http://www.mandrakesecure.net/en/ftp.php

     All packages are signed by MandrakeSoft for security. You can obtain
     the GPG public key of the Mandrake Linux Security Team by executing:

      gpg --recv-keys --keyserver www.mandrakesecure.net 0x22458A98

     Please be aware that sometimes it takes the mirrors a few hours to
     update.

     You can view other update advisories for Mandrake Linux at:

      http://www.mandrakesecure.net/en/advisories/

     MandrakeSoft has several security-related mailing list services that
     anyone can subscribe to. Information on these lists can be obtained by
     visiting:

      http://www.mandrakesecure.net/en/mlist.php

     If you want to report vulnerabilities, please contact

      security_linux-mandrake.com

     Type Bits/KeyID Date User ID
     pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team
      <security linux-mandrake.com>
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.7 (GNU/Linux)

    iD8DBQE/16vjmqjQ0CJFipgRAmiqAKCCRaqDZh3bKO0366F/US5fda7LFwCgggAB
    GZqHBqcnL7GcDGT+x/Zj4Kw=
    =G/tU
    -----END PGP SIGNATURE-----

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Michal Zalewski: "[Full-Disclosure] A new TCP/IP blind data injection technique?"

    Relevant Pages

    • [Full-Disclosure] MDKSA-2003:085 - Updated gdm packages fix vulnerabilities
      ... Several vulnerabilities were discovered in versions of gdm prior to ... Another two vulnerabilities were found in the XDMCP code that could be ... Mandrake Linux 9.0: ... All packages are signed by MandrakeSoft for security. ...
      (Full-Disclosure)
    • MDKSA-2003:010 - Updated printer-drivers packages fix local vulnerabilities
      ... Karol Wiesek and iDefense disovered three vulnerabilities in the ... This is only possible when esputil is suid or sgid; in Mandrake Linux ... If you want to upgrade manually, download the updated package from one ... All packages are signed by MandrakeSoft for security. ...
      (Bugtraq)
    • [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities
      ... Multiple vulnerabilities have been found in CUPS, ... Denial of Service attacks to the remote execution of arbitrary code. ... attacker to write data to the CUPS password file or deny further ... Security is a primary focus of Gentoo Linux and ensuring the ...
      (Bugtraq)
    • [Full-Disclosure] [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities
      ... Multiple vulnerabilities have been found in CUPS, ... Denial of Service attacks to the remote execution of arbitrary code. ... attacker to write data to the CUPS password file or deny further ... Security is a primary focus of Gentoo Linux and ensuring the ...
      (Full-Disclosure)
    • [ GLSA 200412-25 ] CUPS: Multiple vulnerabilities
      ... Multiple vulnerabilities have been found in CUPS, ... Denial of Service attacks to the remote execution of arbitrary code. ... attacker to write data to the CUPS password file or deny further ... Security is a primary focus of Gentoo Linux and ensuring the ...
      (Full-Disclosure)
    • Quantcast