• info
• discussion
• exploit
• solution
• references

Ethereal GIOP Dissector Memory Exhaustion Vulnerability

Solution:
This issue has been addressed in Ethereal 0.9.4. Those affected by this vulnerability are advised to upgrade:


Ethereal Group Ethereal 0.8.18

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Red Hat ethereal-0.9.4-0.7.2.0.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/ethereal-0.9.4-0.7.2.0.i386.rp m


• Red Hat ethereal-0.9.4-0.7.2.0.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/ethereal-0.9.4-0.7.2.0.ia64.rp m


• Red Hat ethereal-gnome-0.9.4-0.7.2.0.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/ethereal-gnome-0.9.4-0.7.2.0.i 386.rpm


• Red Hat ethereal-gnome-0.9.4-0.7.2.0.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/ethereal-gnome-0.9.4-0.7.2.0.i a64.rpm

Ethereal Group Ethereal 0.9

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.4.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.4.tar.gz

Ethereal Group Ethereal 0.9.1

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.4.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.4.tar.gz

Ethereal Group Ethereal 0.9.2

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.4.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.4.tar.gz


• SCO ethereal-0.9.4-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-037.0/R PMS/ethereal-0.9.4-1.i386.rpm


• SCO ethereal-0.9.4-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-03 7.0/RPMS/ethereal-0.9.4-1.i386.rpm


• SCO ethereal-0.9.4-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-037.0/RPM S/ethereal-0.9.4-1.i386.rpm


• SCO ethereal-0.9.4-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-037. 0/RPMS/ethereal-0.9.4-1.i386.rpm

Ethereal Group Ethereal 0.9.3

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.4.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.9.4.tar.gz


• Red Hat ethereal-0.9.4-0.7.3.0.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/ethereal-0.9.4-0.7.3.0.i386.rp m


• Red Hat ethereal-gnome-0.9.4-0.7.3.0.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/ethereal-gnome-0.9.4-0.7.3.0.i 386.rpm


• SCO ethereal-0.9.4-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-037.0/R PMS/ethereal-0.9.4-1.i386.rpm


• SCO ethereal-0.9.4-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-03 7.0/RPMS/ethereal-0.9.4-1.i386.rpm


• SCO ethereal-0.9.4-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-037.0/RPM S/ethereal-0.9.4-1.i386.rpm


• SCO ethereal-0.9.4-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-037. 0/RPMS/ethereal-0.9.4-1.i386.rpm