• info
• discussion
• exploit
• solution
• references

Ethereal RSVP Dissector Memory Corruption Vulnerability

Solution:
FreeBSD has released an updated version of ports which contains version 0.9.6 of Ethereal. The new version of ports may be downloaded from a ports mirror, and the fixed version of Ethereal installed from source. See referenced advisory for more information.

This issue has been addressed in Ethereal 0.9.5. Those affected by this vulnerability are advised to upgrade.

Fixes are available:


Ethereal Group Ethereal 0.8.18

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.5.tar.gz
  ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.5.tar.gz
  ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9.1

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.5.tar.gz
  ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9.2

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.5.tar.gz
  ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9.3

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.5.tar.gz
  ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz


• Red Hat ethereal-0.9.6-0.6x.1.alpha.rpm
  ftp://updates.redhat.com/6.2/en/powertools/alpha/ethereal-0.9.6-0.6x.1 .alpha.rpm


• Red Hat ethereal-0.9.6-0.6x.1.i386.rpm
  ftp://updates.redhat.com/6.2/en/powertools/i386/ethereal-0.9.6-0.6x.1. i386.rpm


• Red Hat ethereal-0.9.6-0.70.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/ethereal-0.9.6-0.70.1 .alpha.rpm


• Red Hat ethereal-0.9.6-0.70.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/ethereal-0.9.6-0.70.1. i386.rpm


• Red Hat ethereal-0.9.6-0.71.0.alpha.rpm
  ftp://updates.redhat.com/7.1/en/powertools/alpha/ethereal-0.9.6-0.71.0 .alpha.rpm


• Red Hat ethereal-0.9.6-0.71.0.i386.rpm
  ftp://updates.redhat.com/7.1/en/powertools/i386/ethereal-0.9.6-0.71.0. i386.rpm

Ethereal Group Ethereal 0.9.4

• Conectiva ethereal-0.9.5-1U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i 386.rpm


• Conectiva ethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386 .rpm


• Conectiva ethereal-common-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2 cl.i386.rpm


• Conectiva ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl. i386.rpm


• Conectiva ethereal-utils-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2c l.i386.rpm


• Conectiva tethereal-0.9.5-1U8_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i38 6.rpm


• Ethereal Group ethereal-0.9.5.tar.gz
  ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz


• Red Hat ethereal-0.9.6-0.72.0.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/ethereal-0.9.6-0.72.0.i386.rpm


• Red Hat ethereal-0.9.6-0.72.0.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/ethereal-0.9.6-0.72.0.ia64.rpm


• Red Hat ethereal-0.9.6-0.73.0.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/ethereal-0.9.6-0.73.0.i386.rpm


• Red Hat ethereal-gnome-0.9.6-0.72.0.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/ethereal-gnome-0.9.6-0.72.0.i3 86.rpm


• Red Hat ethereal-gnome-0.9.6-0.72.0.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/ethereal-gnome-0.9.6-0.72.0.ia 64.rpm


• Red Hat ethereal-gnome-0.9.6-0.73.0.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/ethereal-gnome-0.9.6-0.73.0.i3 86.rpm