Issued:
2005-10-25
Updated:
2005-10-25

RHSA-2005:809 - Security Advisory

Synopsis

ethereal security update

Type/Severity

Security Advisory: Moderate

Topic

Updated Ethereal packages that fix various security vulnerabilities are now
available.

This update has been rated as having moderate security impact by the Red Hat
Security Response Team.

Description

The ethereal package is a program for monitoring network traffic.

A number of security flaws have been discovered in Ethereal. On a system
where Ethereal is running, a remote attacker could send malicious packets
to trigger these flaws and cause Ethereal to crash or potentially execute
arbitrary code. The Common Vulnerabilities and Exposures project
has assigned the names CVE-2005-3241, CVE-2005-3242, CVE-2005-3243,
CVE-2005-3244, CVE-2005-3245, CVE-2005-3246, CVE-2005-3247, CVE-2005-3248,
CVE-2005-3249, and CVE-2005-3184 to these issues.

Users of ethereal should upgrade to these updated packages, which contain
version 0.10.13 and are not vulnerable to these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 ia64
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 ia64
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 171062 - CVE-2005-3241 Multiple ethereal issues (CVE-2005-3242 CVE-2005-3243 CVE-2005-3244 CVE-2005-3245 CVE-2005-3246 CVE-2005-3247 CVE-2005-3248 CVE-2005-3249 CVE-2005-3184)

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
x86_64
ethereal-0.10.13-1.EL4.1.x86_64.rpm SHA-256: 43a3d4dde7720af4ca706363d8f5c32324c396b895b0e288afdc3e4ee4572511
ethereal-0.10.13-1.EL4.1.x86_64.rpm SHA-256: 43a3d4dde7720af4ca706363d8f5c32324c396b895b0e288afdc3e4ee4572511
ethereal-gnome-0.10.13-1.EL4.1.x86_64.rpm SHA-256: 1d1a844daecfbabb021af6343157ea945e7f135c2f6be9fbe0c8053d5966dbfc
ethereal-gnome-0.10.13-1.EL4.1.x86_64.rpm SHA-256: 1d1a844daecfbabb021af6343157ea945e7f135c2f6be9fbe0c8053d5966dbfc
ia64
ethereal-0.10.13-1.EL4.1.ia64.rpm SHA-256: 36bc2006cd4d4fedf8562c96079484dd7f693b22798cb55c8c767ce0b118512b
ethereal-0.10.13-1.EL4.1.ia64.rpm SHA-256: 36bc2006cd4d4fedf8562c96079484dd7f693b22798cb55c8c767ce0b118512b
ethereal-gnome-0.10.13-1.EL4.1.ia64.rpm SHA-256: 157eef809b7b45d604bc14b64f2dedc4627130d206dff19fc283db66c4c41436
ethereal-gnome-0.10.13-1.EL4.1.ia64.rpm SHA-256: 157eef809b7b45d604bc14b64f2dedc4627130d206dff19fc283db66c4c41436
i386
ethereal-0.10.13-1.EL4.1.i386.rpm SHA-256: 578ecd7f479f887238e7e15163e884c4a3e907ca119f595eb997041ff13f85cb
ethereal-0.10.13-1.EL4.1.i386.rpm SHA-256: 578ecd7f479f887238e7e15163e884c4a3e907ca119f595eb997041ff13f85cb
ethereal-gnome-0.10.13-1.EL4.1.i386.rpm SHA-256: b9b75fefda2f9ffb15cd5009435ebc507fb0a05a6b17f15fddc397724392408a
ethereal-gnome-0.10.13-1.EL4.1.i386.rpm SHA-256: b9b75fefda2f9ffb15cd5009435ebc507fb0a05a6b17f15fddc397724392408a

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
ethereal-0.10.13-1.EL4.1.x86_64.rpm SHA-256: 43a3d4dde7720af4ca706363d8f5c32324c396b895b0e288afdc3e4ee4572511
ethereal-gnome-0.10.13-1.EL4.1.x86_64.rpm SHA-256: 1d1a844daecfbabb021af6343157ea945e7f135c2f6be9fbe0c8053d5966dbfc
ia64
ethereal-0.10.13-1.EL4.1.ia64.rpm SHA-256: 36bc2006cd4d4fedf8562c96079484dd7f693b22798cb55c8c767ce0b118512b
ethereal-gnome-0.10.13-1.EL4.1.ia64.rpm SHA-256: 157eef809b7b45d604bc14b64f2dedc4627130d206dff19fc283db66c4c41436
i386
ethereal-0.10.13-1.EL4.1.i386.rpm SHA-256: 578ecd7f479f887238e7e15163e884c4a3e907ca119f595eb997041ff13f85cb
ethereal-gnome-0.10.13-1.EL4.1.i386.rpm SHA-256: b9b75fefda2f9ffb15cd5009435ebc507fb0a05a6b17f15fddc397724392408a

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
ethereal-0.10.13-1.EL4.1.x86_64.rpm SHA-256: 43a3d4dde7720af4ca706363d8f5c32324c396b895b0e288afdc3e4ee4572511
ethereal-gnome-0.10.13-1.EL4.1.x86_64.rpm SHA-256: 1d1a844daecfbabb021af6343157ea945e7f135c2f6be9fbe0c8053d5966dbfc
i386
ethereal-0.10.13-1.EL4.1.i386.rpm SHA-256: 578ecd7f479f887238e7e15163e884c4a3e907ca119f595eb997041ff13f85cb
ethereal-gnome-0.10.13-1.EL4.1.i386.rpm SHA-256: b9b75fefda2f9ffb15cd5009435ebc507fb0a05a6b17f15fddc397724392408a

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
ethereal-0.10.13-1.EL4.1.s390x.rpm SHA-256: b5c6f4229cb7671bae7f1393af937463d6eddb4d84eaeed5065baffa8aa2f30c
ethereal-gnome-0.10.13-1.EL4.1.s390x.rpm SHA-256: 35af2c7bf0b516788693456feec19af7cf0cfe0737e500f4e498a5c74f0dc584
s390
ethereal-0.10.13-1.EL4.1.s390.rpm SHA-256: 1089047263cac26103920da8dfcdc9ab8d5de2b5b8adf65314a4e56f23db2ddb
ethereal-gnome-0.10.13-1.EL4.1.s390.rpm SHA-256: 6bb1645bf49b6e50605dadc0feb905ee315b7f4208a0206c6672762d8c0eb383

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
ethereal-0.10.13-1.EL4.1.ppc.rpm SHA-256: a2328c1ad724dd03d3f04ddc67e3a18e1a68cf8cac3847a3827165b50d8400b0
ethereal-gnome-0.10.13-1.EL4.1.ppc.rpm SHA-256: 3d5e5ec5067456c0328f2630c8f9d464f4d5b00a5366cf74703c6236aa733cc4

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.