Synopsis

ethereal security update

Type/Severity

Security Advisory: Moderate

Topic

Updated Ethereal packages that fix various security vulnerabilities are now
available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Ethereal is a program for monitoring network traffic.

Several denial of service bugs were found in Ethereal's protocol
dissectors. Ethereal could crash or stop responding if it reads a malformed
packet off the network. (CVE-2006-1932, CVE-2006-1933, CVE-2006-1937,
CVE-2006-1938, CVE-2006-1939, CVE-2006-1940)

Several buffer overflow bugs were found in Ethereal's COPS, telnet, and
ALCAP dissectors as well as Network Instruments file code and
NetXray/Windows Sniffer file code. Ethereal could crash or execute
arbitrary code if it reads a malformed packet off the network.
(CVE-2006-1934, CVE-2006-1935, CVE-2006-1936)

Users of ethereal should upgrade to these updated packages containing
version 0.99.0, which is not vulnerable to these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 189906 - CVE-2006-1932 Multiple ethereal issues (CVE-2006-1933, CVE-2006-1934, CVE-2006-1935, CVE-2006-1936, CVE-2006-1937, CVE-2006-1938, CVE-2006-1939, CVE-2006-1940)

CVEs

• CVE-2006-1939
• CVE-2006-1938
• CVE-2006-1933
• CVE-2006-1932
• CVE-2006-1937
• CVE-2006-1936
• CVE-2006-1935
• CVE-2006-1934
• CVE-2006-1940

References

• http://www.ethereal.com/appnotes/enpa-sa-00023.html
• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 4

SRPM
x86_64
ethereal-0.99.0-EL4.2.x86_64.rpm	SHA-256: 5422479b89c592f987b30b3cec9072d4413f3a6218e1b6cae96f60a207fc36e7
ethereal-0.99.0-EL4.2.x86_64.rpm	SHA-256: 5422479b89c592f987b30b3cec9072d4413f3a6218e1b6cae96f60a207fc36e7
ethereal-gnome-0.99.0-EL4.2.x86_64.rpm	SHA-256: 2c69849e263f54458ea224d888cff327c36a9e823a870cc697d9d081ea3fe8ce
ethereal-gnome-0.99.0-EL4.2.x86_64.rpm	SHA-256: 2c69849e263f54458ea224d888cff327c36a9e823a870cc697d9d081ea3fe8ce
ia64
ethereal-0.99.0-EL4.2.ia64.rpm	SHA-256: bb99573170ce8a44676376025e15a6d2ec1cffeaa108d93633fa6b59a2ebbde8
ethereal-0.99.0-EL4.2.ia64.rpm	SHA-256: bb99573170ce8a44676376025e15a6d2ec1cffeaa108d93633fa6b59a2ebbde8
ethereal-gnome-0.99.0-EL4.2.ia64.rpm	SHA-256: 5641108f6b83cca9723d58318a5a669877d0444103dae7be803c2fec77992ec3
ethereal-gnome-0.99.0-EL4.2.ia64.rpm	SHA-256: 5641108f6b83cca9723d58318a5a669877d0444103dae7be803c2fec77992ec3
i386
ethereal-0.99.0-EL4.2.i386.rpm	SHA-256: cfe37dfdc01aaee8988817f939c575398b308ead4660acaa53e6d80864499c19
ethereal-0.99.0-EL4.2.i386.rpm	SHA-256: cfe37dfdc01aaee8988817f939c575398b308ead4660acaa53e6d80864499c19
ethereal-gnome-0.99.0-EL4.2.i386.rpm	SHA-256: b671b29f4b7e3f4d582503289eae623e3699e0e35cf37f0973212a4c5a975e92
ethereal-gnome-0.99.0-EL4.2.i386.rpm	SHA-256: b671b29f4b7e3f4d582503289eae623e3699e0e35cf37f0973212a4c5a975e92

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
ethereal-0.99.0-EL4.2.x86_64.rpm	SHA-256: 5422479b89c592f987b30b3cec9072d4413f3a6218e1b6cae96f60a207fc36e7
ethereal-gnome-0.99.0-EL4.2.x86_64.rpm	SHA-256: 2c69849e263f54458ea224d888cff327c36a9e823a870cc697d9d081ea3fe8ce
ia64
ethereal-0.99.0-EL4.2.ia64.rpm	SHA-256: bb99573170ce8a44676376025e15a6d2ec1cffeaa108d93633fa6b59a2ebbde8
ethereal-gnome-0.99.0-EL4.2.ia64.rpm	SHA-256: 5641108f6b83cca9723d58318a5a669877d0444103dae7be803c2fec77992ec3
i386
ethereal-0.99.0-EL4.2.i386.rpm	SHA-256: cfe37dfdc01aaee8988817f939c575398b308ead4660acaa53e6d80864499c19
ethereal-gnome-0.99.0-EL4.2.i386.rpm	SHA-256: b671b29f4b7e3f4d582503289eae623e3699e0e35cf37f0973212a4c5a975e92

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
ethereal-0.99.0-EL4.2.x86_64.rpm	SHA-256: 5422479b89c592f987b30b3cec9072d4413f3a6218e1b6cae96f60a207fc36e7
ethereal-gnome-0.99.0-EL4.2.x86_64.rpm	SHA-256: 2c69849e263f54458ea224d888cff327c36a9e823a870cc697d9d081ea3fe8ce
i386
ethereal-0.99.0-EL4.2.i386.rpm	SHA-256: cfe37dfdc01aaee8988817f939c575398b308ead4660acaa53e6d80864499c19
ethereal-gnome-0.99.0-EL4.2.i386.rpm	SHA-256: b671b29f4b7e3f4d582503289eae623e3699e0e35cf37f0973212a4c5a975e92

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
ethereal-0.99.0-EL4.2.s390x.rpm	SHA-256: 8f96bfb54bc1d007b58208c034dcf1b6837e5d4fbb173bc96683d09bb25e978f
ethereal-gnome-0.99.0-EL4.2.s390x.rpm	SHA-256: 095be6ed29b796be73b0b56fc2836eb382206ddc32d685170a4fa4b8d39471c7
s390
ethereal-0.99.0-EL4.2.s390.rpm	SHA-256: 1a2f1fe820f4bdd75e50cd29f5ca1eded19d985377a4e48bb7ff78f130567bf7
ethereal-gnome-0.99.0-EL4.2.s390.rpm	SHA-256: 38f2e304c128b341c7f607acf199833c6a10f9cd10a4fbfaab5f1e7a7200f689

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
ethereal-0.99.0-EL4.2.ppc.rpm	SHA-256: ea82c4a94e05640d85cb314edaf886eab7ffd2c2cb10d1d65f89c5b9cd7171f3
ethereal-gnome-0.99.0-EL4.2.ppc.rpm	SHA-256: 03a1fbbb559af2b03e002cc696e131f06e18ea67f4394d06f2ea6d7d00394466