Issued:
2005-05-24
Updated:
2005-05-24

RHSA-2005:427 - Security Advisory

Synopsis

ethereal security update

Type/Severity

Security Advisory: Moderate

Topic

Updated Ethereal packages that fix various security vulnerabilities are now
available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The ethereal package is a program for monitoring network traffic.

A number of security flaws have been discovered in Ethereal. On a system
where Ethereal is running, a remote attacker could send malicious packets
to trigger these flaws and cause Ethereal to crash or potentially execute
arbitrary code. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the names CAN-2005-1456, CAN-2005-1457,
CAN-2005-1458, CAN-2005-1459, CAN-2005-1460, CAN-2005-1461, CAN-2005-1462,
CAN-2005-1463, CAN-2005-1464, CAN-2005-1465, CAN-2005-1466, CAN-2005-1467,
CAN-2005-1468, CAN-2005-1469, and CAN-2005-1470 to these issues.

Users of ethereal should upgrade to these updated packages, which contain
version 0.10.11 which is not vulnerable to these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 ia64
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 ia64
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
x86_64
ethereal-0.10.11-1.EL4.1.x86_64.rpm SHA-256: ecd2385a289d2c8e8cb49cd4db3b6c2d0edecaac854467dd004cfc11112a25ef
ethereal-0.10.11-1.EL4.1.x86_64.rpm SHA-256: ecd2385a289d2c8e8cb49cd4db3b6c2d0edecaac854467dd004cfc11112a25ef
ethereal-gnome-0.10.11-1.EL4.1.x86_64.rpm SHA-256: 1aaf8c7002ca9c8325706f7c2c67d9f2dfcc13353650dbbf856a1258105e2478
ethereal-gnome-0.10.11-1.EL4.1.x86_64.rpm SHA-256: 1aaf8c7002ca9c8325706f7c2c67d9f2dfcc13353650dbbf856a1258105e2478
ia64
ethereal-0.10.11-1.EL4.1.ia64.rpm SHA-256: 3f682b19b03cd74cefda3bcbe9a99dbbb3bb7b9348ebe4eb28e4d432739dc995
ethereal-0.10.11-1.EL4.1.ia64.rpm SHA-256: 3f682b19b03cd74cefda3bcbe9a99dbbb3bb7b9348ebe4eb28e4d432739dc995
ethereal-gnome-0.10.11-1.EL4.1.ia64.rpm SHA-256: ab1880660e714c99f07a4ad248548d18a8a5769b4e55e9b6a8e18b8421517525
ethereal-gnome-0.10.11-1.EL4.1.ia64.rpm SHA-256: ab1880660e714c99f07a4ad248548d18a8a5769b4e55e9b6a8e18b8421517525
i386
ethereal-0.10.11-1.EL4.1.i386.rpm SHA-256: 58fcd1724bc6beb1a22af298e5b1d7801f10ffbe410473dce79d529654915411
ethereal-0.10.11-1.EL4.1.i386.rpm SHA-256: 58fcd1724bc6beb1a22af298e5b1d7801f10ffbe410473dce79d529654915411
ethereal-gnome-0.10.11-1.EL4.1.i386.rpm SHA-256: 5875436569ac7131ac4b0abb9bb74b8df3113e601505989811fbf29bc807e776
ethereal-gnome-0.10.11-1.EL4.1.i386.rpm SHA-256: 5875436569ac7131ac4b0abb9bb74b8df3113e601505989811fbf29bc807e776

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
ethereal-0.10.11-1.EL4.1.x86_64.rpm SHA-256: ecd2385a289d2c8e8cb49cd4db3b6c2d0edecaac854467dd004cfc11112a25ef
ethereal-gnome-0.10.11-1.EL4.1.x86_64.rpm SHA-256: 1aaf8c7002ca9c8325706f7c2c67d9f2dfcc13353650dbbf856a1258105e2478
ia64
ethereal-0.10.11-1.EL4.1.ia64.rpm SHA-256: 3f682b19b03cd74cefda3bcbe9a99dbbb3bb7b9348ebe4eb28e4d432739dc995
ethereal-gnome-0.10.11-1.EL4.1.ia64.rpm SHA-256: ab1880660e714c99f07a4ad248548d18a8a5769b4e55e9b6a8e18b8421517525
i386
ethereal-0.10.11-1.EL4.1.i386.rpm SHA-256: 58fcd1724bc6beb1a22af298e5b1d7801f10ffbe410473dce79d529654915411
ethereal-gnome-0.10.11-1.EL4.1.i386.rpm SHA-256: 5875436569ac7131ac4b0abb9bb74b8df3113e601505989811fbf29bc807e776

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
ethereal-0.10.11-1.EL4.1.x86_64.rpm SHA-256: ecd2385a289d2c8e8cb49cd4db3b6c2d0edecaac854467dd004cfc11112a25ef
ethereal-gnome-0.10.11-1.EL4.1.x86_64.rpm SHA-256: 1aaf8c7002ca9c8325706f7c2c67d9f2dfcc13353650dbbf856a1258105e2478
i386
ethereal-0.10.11-1.EL4.1.i386.rpm SHA-256: 58fcd1724bc6beb1a22af298e5b1d7801f10ffbe410473dce79d529654915411
ethereal-gnome-0.10.11-1.EL4.1.i386.rpm SHA-256: 5875436569ac7131ac4b0abb9bb74b8df3113e601505989811fbf29bc807e776

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
ethereal-0.10.11-1.EL4.1.s390x.rpm SHA-256: 6566cacbb0f39d280aef956cc598b3dbc07be232a1746b6ab20dd8f9c066927e
ethereal-gnome-0.10.11-1.EL4.1.s390x.rpm SHA-256: ecb23c6d5d4039373c65ee3f307719a49026a762b7c20d3ed95ff86acc33df3a
s390
ethereal-0.10.11-1.EL4.1.s390.rpm SHA-256: 56eb764b83018663153575e56f8643cd0c29ce42c0c1e564c6e14ad4271fbd3f
ethereal-gnome-0.10.11-1.EL4.1.s390.rpm SHA-256: 2b859f2cb5099b2a625ad1aa582a1b128f583d14cfa020679e97defa132b4e7f

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
ethereal-0.10.11-1.EL4.1.ppc.rpm SHA-256: 4bd2d4156918a9bcca7ba3057169cad92f76988ff56df24f64fdaf9b830d3016
ethereal-gnome-0.10.11-1.EL4.1.ppc.rpm SHA-256: bef0498b80db31f38fbd6d703a13e17e6b6e6218953823e10d7e55df70052016

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.