bugtraq - Re: Ethereal remote buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20050309023501.GA13857@satellite>
Date: Tue, 8 Mar 2005 23:35:01 -0300
From: Diego Giagio <dgiagio@...on.com.br>
To: bugtraq@...urityfocus.com
Cc: Gerald Combs <gerald@...ereal.com>
Subject: Re: Ethereal remote buffer overflow

> ---
> 
> Title			:  Ethereal remote buffer overflow
> Advisory ID		:  LSS-2005-03-04
> Date			:  08.03.2005 
> Advisory URL:		:  http://security.lss.hr/en/index.php?page=exp 
> Impact			:  Stack overflow and possible code execution
> Risk level		:  High 
> Vulnerability type	:  Remote 
> Vendors contacted	:  Yes
> 
> ---

This vulnerability was first discovered by me, on 01/Mar/2005. The vendor was
immediatelly contacted, as you can see below:

http://marc.theaimsgroup.com/?l=ethereal-dev&m=110973103628823&w=2
http://marc.theaimsgroup.com/?l=ethereal-dev&m=110973731214683&w=2

This vulnerability wouldn't made public until the next Ethereal's version
comes out (hopefully 10 or 11 this month), as I dealed with the vendor.

A proof-of-concept remote root exploit was made by me, but will only be
publicized on schedule.

Diego Giagio