lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list] 
Message-ID: <m1Crx2d-000ofkC__5660.64616800777$1106428716$gmane$org@finlandia.Infodrom.North.DE>
Date: Fri, 21 Jan 2005 12:33:27 +0100 (CET)
From: joey@...odrom.org (Martin Schulze)
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 653-1] New ethereal packages fix buffer overflow


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 653-1                     security@...ian.org
http://www.debian.org/security/                             Martin Schulze
January 21st, 2005                      http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : ethereal
Vulnerability  : buffer overflow
Problem-Type   : remote
Debian-specific: no
CVE ID         : CAN-2005-0084

A buffer overflow has been detected in the X11 dissector of ethereal,
a commonly used network traffic analyser.  A remote attacker may be
able to overflow a buffer using a specially crafted IP packet.  More
problems have been discovered which don't apply to the version in
woody but are fixed in sid as well.

For the stable distribution (woody) this problem has been fixed in
version 0.9.4-1woody11.

For the unstable distribution (sid) this problem has been fixed in
version 0.10.9-1.

We recommend that you upgrade your ethereal package.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11.dsc
      Size/MD5 checksum:      681 8e8bbe73bf65d45446fb7c03dddb41a1
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11.diff.gz
      Size/MD5 checksum:    40601 a9a6e17ee6c2e1749ac3d140628c77c6
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4.orig.tar.gz
      Size/MD5 checksum:  3278908 42e999daa659820ee93aaaa39ea1e9ea

  Alpha architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_alpha.deb
      Size/MD5 checksum:  1941102 aab1360769a64476ce4113068230c8ad
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_alpha.deb
      Size/MD5 checksum:   334424 c3647ca04af3f48b4e24ec6ae2fa6b4d
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_alpha.deb
      Size/MD5 checksum:   222460 06e7e8c5713efa6f102bb436c6251e61
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_alpha.deb
      Size/MD5 checksum:  1707844 08f64c248a99394a8366ca5b512e096d

  ARM architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_arm.deb
      Size/MD5 checksum:  1635456 190bd5415abaf62c1cde340605079152
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_arm.deb
      Size/MD5 checksum:   297770 6d5ee1df687aeee0e49d4bc27cfab0da
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_arm.deb
      Size/MD5 checksum:   206356 fcba9b5be975e62bd5cf8efca338a299
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_arm.deb
      Size/MD5 checksum:  1439676 d825f5c16e37f1a5c1a7aaa6ba0798b1

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_i386.deb
      Size/MD5 checksum:  1513338 996070722f320a6d6d40652101480ec6
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_i386.deb
      Size/MD5 checksum:   286736 69fd768db07ee2ac52b33f3188fdba97
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_i386.deb
      Size/MD5 checksum:   198652 50e416b732e5d02d1f8e6bfb5269d1f9
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_i386.deb
      Size/MD5 checksum:  1326536 c8415c2297b0bc30a297b3b07e0a1186

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_ia64.deb
      Size/MD5 checksum:  2150414 b46cc7da4c46e2a920299cef6d6f1f1c
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_ia64.deb
      Size/MD5 checksum:   373372 1b977535a20b449ea7c1b21e09f9493b
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_ia64.deb
      Size/MD5 checksum:   234004 e8c69f3f1db9708ceb2e74122e81c168
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_ia64.deb
      Size/MD5 checksum:  1861780 6c48358d2c8c892d24ebbc29b020931d

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_hppa.deb
      Size/MD5 checksum:  1804712 495491720997b53f60f5b9dbfeabac27
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_hppa.deb
      Size/MD5 checksum:   322696 cccbc77685f25eb8aa1a8429e0298dd7
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_hppa.deb
      Size/MD5 checksum:   217116 3bcb0ff60d01b12b85d25ee6e277fbe2
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_hppa.deb
      Size/MD5 checksum:  1576164 67ecb81ffa522198b999353ce6294b19

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_m68k.deb
      Size/MD5 checksum:  1424704 7014155418ca6c1947e71a04ab716b03
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_m68k.deb
      Size/MD5 checksum:   282996 c73d8c241771bbe5f89c1e859e436aba
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_m68k.deb
      Size/MD5 checksum:   195364 21d07bf8bb05d52dfd45d91c73c656a6
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_m68k.deb
      Size/MD5 checksum:  1248922 5cd077cf05e8e14f627a10e44ced739d

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_mips.deb
      Size/MD5 checksum:  1617160 41dd4cd8059c472ff109bb002d9b5074
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_mips.deb
      Size/MD5 checksum:   305514 855a56f8596f0bb4da7fe0024616d87a
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_mips.deb
      Size/MD5 checksum:   213936 8459c58071700c436ea96af9a6fd7901
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_mips.deb
      Size/MD5 checksum:  1422110 bdcdf3c021429ccaf8eb95027a48f69e

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_mipsel.deb
      Size/MD5 checksum:  1598210 0c60efc6fcdea7d25359ecd88dd8aeff
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_mipsel.deb
      Size/MD5 checksum:   304982 63cea39a93b19891ae0bbfaa8c5e0327
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_mipsel.deb
      Size/MD5 checksum:   213596 e7d160f30cd5e9360fc90d4ef160dfb6
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_mipsel.deb
      Size/MD5 checksum:  1406444 e8f3d141f724da42a16d051c12879efb

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_powerpc.deb
      Size/MD5 checksum:  1618676 f3890280569d1b2a7e66c039c0def6b4
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_powerpc.deb
      Size/MD5 checksum:   302174 d5c364dcb6039f637005c4ce259bed2c
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_powerpc.deb
      Size/MD5 checksum:   209172 ae06ac9e4e976d4fd846b3b222efe911
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_powerpc.deb
      Size/MD5 checksum:  1419454 2a6a56b278e0e647cbb7c41881e5aaa0

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_s390.deb
      Size/MD5 checksum:  1574786 17c662f34613b6b0fb24e033dd1fc463
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_s390.deb
      Size/MD5 checksum:   301014 7f0c78cce38eb8927b708146cb4b8463
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_s390.deb
      Size/MD5 checksum:   204250 f85efb4e0c75da840c7b1224292f7005
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_s390.deb
      Size/MD5 checksum:  1387552 c4e2e39307ca9b70793e1b8a6dc9a3ee

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_sparc.deb
      Size/MD5 checksum:  1583368 199f9efbe4d98e43882bb28d054c8ff6
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_sparc.deb
      Size/MD5 checksum:   318282 87d2b4c8298e3e179d89aa3827602011
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_sparc.deb
      Size/MD5 checksum:   205026 0c71e4c61947bc0f198de8d66a1892b4
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_sparc.deb
      Size/MD5 checksum:  1389390 8327f812bcaee04cf83fc34f8450aacc


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@...ts.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB8OiHW5ql+IAeqTIRAhEJAJ9dEuKVcXscQbAZrd6VmZ0de5Ou6wCcDHAN
gcBn2Bp/9cc2FXzr5L6ccps=
=2QHP
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ