Ethereal OSI Dissector Buffer Overflow Vulnerability Solution:
SCO have released an advisory (CSSA-2003-030.0) and fixes to address this issue. Affected users are advised to install the appropriate fix as soon as possible. Further information regarding the application of these fixes can be found in the referenced advisory. Fixes are linked below.
Conectiva has released a security advisory (CLSA-2003:719) and fixes to address this issue. Users are advised to upgrade as soon as possible.
Red Hat has released a security advisory (RHSA-2003:077-13) containing fixes which address this and other issues with ethereal. See referenced advisory for further details on obtaining and applying fixes.
Conectiva has released a security advisory (CLA-2003:662) and fixes to address this issue. Users are advised to upgrade as soon as possible.
Mandrake has released a security advisory (MDKSA-2003:070) containing fixes to address this issue. Users are advised to upgrade as soon as possible.
Ethereal 0.9.13 is not vulnerable to this issue. Affected users are advised to upgrade to the newest version of Ethereal.
Red Hat has released upgraded RPMs which correct this vulnerability. Please see advisory RHSA-2003:203-01 (references section) for download links.
Updates are available for Yellow Dog Linux. These updates can be applied manually or by issuing the following command:
yum update ethereal
Ethereal Group Ethereal 0.9
Ethereal Group Ethereal 0.9.1
Ethereal Group Ethereal 0.9.10
Ethereal Group Ethereal 0.9.11
Ethereal Group Ethereal 0.9.12
Ethereal Group Ethereal 0.9.2
Ethereal Group Ethereal 0.9.3
Ethereal Group Ethereal 0.9.4
Ethereal Group Ethereal 0.9.5
Ethereal Group Ethereal 0.9.6
Ethereal Group Ethereal 0.9.7
Ethereal Group Ethereal 0.9.8
Ethereal Group Ethereal 0.9.9
SCO OpenLinux Server 3.1.1
SCO OpenLinux Workstation 3.1.1
Conectiva Linux 7.0
Conectiva Linux 8.0
Conectiva Linux 9.0
