Synopsis

ethereal security update

Type/Severity

Security Advisory: Moderate

Topic

Updated Ethereal packages that fix various security vulnerabilities are now
available.

This update has been rated as having moderate security impact by the Red Hat
Security Response Team.

Description

The ethereal package is a program for monitoring network traffic.

A number of security flaws have been discovered in Ethereal. On a system
where Ethereal is running, a remote attacker could send malicious packets
to trigger these flaws and cause Ethereal to crash or potentially execute
arbitrary code.

A buffer overflow flaw was discovered in the Etheric dissector. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0704 to this issue.

The GPRS-LLC dissector could crash if the "ignore cipher bit" option was
set. The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-0705 to this issue.

A buffer overflow flaw was discovered in the 3GPP2 A11 dissector. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0699 to this issue.

A buffer overflow flaw was discovered in the IAPP dissector. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0739 to this issue.

Users of ethereal should upgrade to these updated packages, which contain
version 0.10.10 and are not vulnerable to these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 150705 - CAN-2005-0699 Multiple ethereal issues (CAN-2005-0704 CAN-2005-0705)

CVEs

• CVE-2005-0766
• CVE-2005-0765
• CVE-2005-0739
• CVE-2005-0705
• CVE-2005-0704
• CVE-2005-0699

References

• http://www.ethereal.com/appnotes/enpa-sa-00018.html

Red Hat Enterprise Linux Server 4

SRPM
x86_64
ethereal-0.10.10-1.EL4.1.x86_64.rpm	SHA-256: 9957e88dfa03a4e723f2111bf286334e50ea3e3e109de68ccc2541c99096caa2
ethereal-0.10.10-1.EL4.1.x86_64.rpm	SHA-256: 9957e88dfa03a4e723f2111bf286334e50ea3e3e109de68ccc2541c99096caa2
ethereal-gnome-0.10.10-1.EL4.1.x86_64.rpm	SHA-256: ddb98e07723b64d2117e7dd2fb0fe5ec14492a71f8f035135f19458767288a08
ethereal-gnome-0.10.10-1.EL4.1.x86_64.rpm	SHA-256: ddb98e07723b64d2117e7dd2fb0fe5ec14492a71f8f035135f19458767288a08
ia64
ethereal-0.10.10-1.EL4.1.ia64.rpm	SHA-256: 622ea9fa4dc743baefe4b4a95a4f5fa451cd061626e3882067eb9598f1b16f95
ethereal-0.10.10-1.EL4.1.ia64.rpm	SHA-256: 622ea9fa4dc743baefe4b4a95a4f5fa451cd061626e3882067eb9598f1b16f95
ethereal-gnome-0.10.10-1.EL4.1.ia64.rpm	SHA-256: 0ff447a0af964f9fdf9c8520ba42c2b8d71f6cf05e8cdae89c4112d73dc54200
ethereal-gnome-0.10.10-1.EL4.1.ia64.rpm	SHA-256: 0ff447a0af964f9fdf9c8520ba42c2b8d71f6cf05e8cdae89c4112d73dc54200
i386
ethereal-0.10.10-1.EL4.1.i386.rpm	SHA-256: 5865154074586a3a6250bd7041f54a4d2646cf76e6077723622f099055ce84d9
ethereal-0.10.10-1.EL4.1.i386.rpm	SHA-256: 5865154074586a3a6250bd7041f54a4d2646cf76e6077723622f099055ce84d9
ethereal-gnome-0.10.10-1.EL4.1.i386.rpm	SHA-256: 78de2b172a7a2e784e7d22061164b5c1677ed9e6cf1da6c0eae07206aba95389
ethereal-gnome-0.10.10-1.EL4.1.i386.rpm	SHA-256: 78de2b172a7a2e784e7d22061164b5c1677ed9e6cf1da6c0eae07206aba95389

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
ethereal-0.10.10-1.EL4.1.x86_64.rpm	SHA-256: 9957e88dfa03a4e723f2111bf286334e50ea3e3e109de68ccc2541c99096caa2
ethereal-gnome-0.10.10-1.EL4.1.x86_64.rpm	SHA-256: ddb98e07723b64d2117e7dd2fb0fe5ec14492a71f8f035135f19458767288a08
ia64
ethereal-0.10.10-1.EL4.1.ia64.rpm	SHA-256: 622ea9fa4dc743baefe4b4a95a4f5fa451cd061626e3882067eb9598f1b16f95
ethereal-gnome-0.10.10-1.EL4.1.ia64.rpm	SHA-256: 0ff447a0af964f9fdf9c8520ba42c2b8d71f6cf05e8cdae89c4112d73dc54200
i386
ethereal-0.10.10-1.EL4.1.i386.rpm	SHA-256: 5865154074586a3a6250bd7041f54a4d2646cf76e6077723622f099055ce84d9
ethereal-gnome-0.10.10-1.EL4.1.i386.rpm	SHA-256: 78de2b172a7a2e784e7d22061164b5c1677ed9e6cf1da6c0eae07206aba95389

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
ethereal-0.10.10-1.EL4.1.x86_64.rpm	SHA-256: 9957e88dfa03a4e723f2111bf286334e50ea3e3e109de68ccc2541c99096caa2
ethereal-gnome-0.10.10-1.EL4.1.x86_64.rpm	SHA-256: ddb98e07723b64d2117e7dd2fb0fe5ec14492a71f8f035135f19458767288a08
i386
ethereal-0.10.10-1.EL4.1.i386.rpm	SHA-256: 5865154074586a3a6250bd7041f54a4d2646cf76e6077723622f099055ce84d9
ethereal-gnome-0.10.10-1.EL4.1.i386.rpm	SHA-256: 78de2b172a7a2e784e7d22061164b5c1677ed9e6cf1da6c0eae07206aba95389

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
ethereal-0.10.10-1.EL4.1.s390x.rpm	SHA-256: e3c45526e50daeda73859240539a4b39474d4f4374b0b00ab73d3c3a874491e5
ethereal-gnome-0.10.10-1.EL4.1.s390x.rpm	SHA-256: 7f4c640dfb1ae2ef678390999f5d5fb02a478c15bb41b456699295e66b7c90e4
s390
ethereal-0.10.10-1.EL4.1.s390.rpm	SHA-256: cd9899d2b8aabbf9e75c75a57089ce31d13a954a41bdcd82cdf580489ef5afcc
ethereal-gnome-0.10.10-1.EL4.1.s390.rpm	SHA-256: 79f37d3a33535c17d4d0e4c29594bcba9dfcaf3ff53b453c0b40f516288ed44e

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
ethereal-0.10.10-1.EL4.1.ppc.rpm	SHA-256: e83a02a31c3f2201e326cfbf6e547b3c5d8989d403c7939992b3163a9223604e
ethereal-gnome-0.10.10-1.EL4.1.ppc.rpm	SHA-256: d2a594e1934ef98adae3ee7eafbf113572315bdd3c6dd15f8bfe1f881c139769