Synopsis

ethereal security update

Type/Severity

Security Advisory: Moderate

Topic

Updated Ethereal packages that fix various security vulnerabilities are now
available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Ethereal is a program for monitoring network traffic.

Two denial of service bugs were found in Ethereal's IRC and GTP protocol
dissectors. Ethereal could crash or stop responding if it reads a malformed
IRC or GTP packet off the network. The Common Vulnerabilities and Exposures
project (cve.mitre.org) assigned the names CVE-2005-3313 and CVE-2005-4585
to these issues.

A buffer overflow bug was found in Ethereal's OSPF protocol dissector.
Ethereal could crash or execute arbitrary code if it reads a malformed OSPF
packet off the network. (CVE-2005-3651)

Users of ethereal should upgrade to these updated packages containing
version 0.10.14, which is not vulnerable to these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 172297 - CVE-2005-3313 Ethereal IRC dissector DoS
• BZ - 176828 - CVE-2005-4585 ethereal GTP dissector could go into an infinite loop
• BZ - 176940 - CVE-2005-3651 ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability

CVEs

• CVE-2005-3313
• CVE-2005-3651
• CVE-2005-4585

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
x86_64
ethereal-0.10.14-1.EL4.1.x86_64.rpm	SHA-256: a7142f2f63d20be74e0eca81148ed01db1d10d5595242a9687d67e6847a2b1a5
ethereal-0.10.14-1.EL4.1.x86_64.rpm	SHA-256: a7142f2f63d20be74e0eca81148ed01db1d10d5595242a9687d67e6847a2b1a5
ethereal-gnome-0.10.14-1.EL4.1.x86_64.rpm	SHA-256: 30e6f00095b43e93fc986671f13d9cd99ff44f00c94dddb595f655c1db688458
ethereal-gnome-0.10.14-1.EL4.1.x86_64.rpm	SHA-256: 30e6f00095b43e93fc986671f13d9cd99ff44f00c94dddb595f655c1db688458
ia64
ethereal-0.10.14-1.EL4.1.ia64.rpm	SHA-256: 5c4798577bb4229d7f954cbc7d6c782563eada90cdf678fd5938aba8eba807ca
ethereal-0.10.14-1.EL4.1.ia64.rpm	SHA-256: 5c4798577bb4229d7f954cbc7d6c782563eada90cdf678fd5938aba8eba807ca
ethereal-gnome-0.10.14-1.EL4.1.ia64.rpm	SHA-256: f275bf6a1393f6a4873f962faf8c23738c892c6bc376b185c853ffb0d9a2c28a
ethereal-gnome-0.10.14-1.EL4.1.ia64.rpm	SHA-256: f275bf6a1393f6a4873f962faf8c23738c892c6bc376b185c853ffb0d9a2c28a
i386
ethereal-0.10.14-1.EL4.1.i386.rpm	SHA-256: 9386ba2c61c79cb0df9742dd11a89c8a85aadfa883e56f8b80a59b5efee54491
ethereal-0.10.14-1.EL4.1.i386.rpm	SHA-256: 9386ba2c61c79cb0df9742dd11a89c8a85aadfa883e56f8b80a59b5efee54491
ethereal-gnome-0.10.14-1.EL4.1.i386.rpm	SHA-256: b70cead77c126a4b26532132079c1aec15fd8bec0cbcb1cff874cd9234fbd65c
ethereal-gnome-0.10.14-1.EL4.1.i386.rpm	SHA-256: b70cead77c126a4b26532132079c1aec15fd8bec0cbcb1cff874cd9234fbd65c

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
ethereal-0.10.14-1.EL4.1.x86_64.rpm	SHA-256: a7142f2f63d20be74e0eca81148ed01db1d10d5595242a9687d67e6847a2b1a5
ethereal-gnome-0.10.14-1.EL4.1.x86_64.rpm	SHA-256: 30e6f00095b43e93fc986671f13d9cd99ff44f00c94dddb595f655c1db688458
ia64
ethereal-0.10.14-1.EL4.1.ia64.rpm	SHA-256: 5c4798577bb4229d7f954cbc7d6c782563eada90cdf678fd5938aba8eba807ca
ethereal-gnome-0.10.14-1.EL4.1.ia64.rpm	SHA-256: f275bf6a1393f6a4873f962faf8c23738c892c6bc376b185c853ffb0d9a2c28a
i386
ethereal-0.10.14-1.EL4.1.i386.rpm	SHA-256: 9386ba2c61c79cb0df9742dd11a89c8a85aadfa883e56f8b80a59b5efee54491
ethereal-gnome-0.10.14-1.EL4.1.i386.rpm	SHA-256: b70cead77c126a4b26532132079c1aec15fd8bec0cbcb1cff874cd9234fbd65c

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
ethereal-0.10.14-1.EL4.1.x86_64.rpm	SHA-256: a7142f2f63d20be74e0eca81148ed01db1d10d5595242a9687d67e6847a2b1a5
ethereal-gnome-0.10.14-1.EL4.1.x86_64.rpm	SHA-256: 30e6f00095b43e93fc986671f13d9cd99ff44f00c94dddb595f655c1db688458
i386
ethereal-0.10.14-1.EL4.1.i386.rpm	SHA-256: 9386ba2c61c79cb0df9742dd11a89c8a85aadfa883e56f8b80a59b5efee54491
ethereal-gnome-0.10.14-1.EL4.1.i386.rpm	SHA-256: b70cead77c126a4b26532132079c1aec15fd8bec0cbcb1cff874cd9234fbd65c

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
ethereal-0.10.14-1.EL4.1.s390x.rpm	SHA-256: 39711901f9cbd1a37f59395fc283fbcaf23ff89b6f88fd42ef7cef867d5c387f
ethereal-gnome-0.10.14-1.EL4.1.s390x.rpm	SHA-256: d86f896e5208dd89da6f18d16dfc70f7cd62ea31e11c4083cb51970d34878187
s390
ethereal-0.10.14-1.EL4.1.s390.rpm	SHA-256: 8dca3253dffe8f3a4800c6e1f1fc98859c2e34ee9a9f8add9597a206407bb1c6
ethereal-gnome-0.10.14-1.EL4.1.s390.rpm	SHA-256: 784af747ab03c25c485a21c08a7d2b7cd136ac3359893ff2372bfdaf80ee7149

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
ethereal-0.10.14-1.EL4.1.ppc.rpm	SHA-256: 15b26c676853ffa46aac2be4a44ae9c238ef233fe03e4c5dbe3a30a4f74034c1
ethereal-gnome-0.10.14-1.EL4.1.ppc.rpm	SHA-256: 14f41d5777ecff93dabbaf993639f8c3cab57f98882358f3bbf06bc396c8f0f2