• info
• discussion
• exploit
• solution
• references

Ethereal Malformed SNMP Denial of Service Vulnerability

Solution:
Though 0.9.2 fixes this problem, there are additional issues with the 0.9.2 release. Users are advised to use the 0.9.3 release.

Vendor fixes available:


Gerald Combs Ethereal 0.8.13

• Conectiva ethereal-0.9.3-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/ethereal-0.9.3-1U50_1cl.i 386.rpm


• Conectiva ethereal-0.9.3-1U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/ethereal-0.9.3-1U51_1cl.i 386.rpm


• Conectiva ethereal-0.9.3-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.3-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.3-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.3-1U70_1cl.i 386.rpm


• Ethereal Group ethereal-0.9.3.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.3.tar.gz


• FreeBSD ethereal-0.9.3.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/All/eth ereal-0.9.3.tgz

Ethereal Group Ethereal 0.8.18

• Red Hat ethereal-0.9.4-0.7.2.0.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/ethereal-0.9.4-0.7.2.0.i386.rp m


• Red Hat ethereal-0.9.4-0.7.2.0.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/ethereal-0.9.4-0.7.2.0.ia64.rp m


• Red Hat ethereal-gnome-0.9.4-0.7.2.0.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/ethereal-gnome-0.9.4-0.7.2.0.i 386.rpm


• Red Hat ethereal-gnome-0.9.4-0.7.2.0.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/ethereal-gnome-0.9.4-0.7.2.0.i a64.rpm

Ethereal Group Ethereal 0.9.1

• Ethereal Group ethereal-0.9.3.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.3.tar.gz