Ethereal多个远程内存破坏漏洞

http://netsecurity.51cto.com 2005-08-10 10:35 51CTO.COM 我要评论(0)

摘要：异常处理错误##远程进入系统##及时修补
标签：漏洞内存

信息提供：	安全公告（或线索）提供热线：51cto.editor@gmail.com
漏洞类别：	远程内存破坏漏洞
攻击类型：	远程攻击
发布日期：	2002-06-28
更新日期：	2002-07-15
受影响系统：	Ethereal Group Ethereal 0.9.4 Ethereal Group Ethereal 0.9.3 Ethereal Group Ethereal 0.9.2 Ethereal Group Ethereal 0.9.1 Ethereal Group Ethereal 0.9.0 Ethereal Group Ethereal 0.8.18 - Linux系统 - Microsoft Windows XP - Microsoft Windows NT 4.0 - Microsoft Windows 2000 - Unix系统
安全系统：	Ethereal Group Ethereal 0.9.5
漏洞报告人：	无
漏洞描述：	Ethereal是一款网络协议分析软件，可使用在多种Unix和Linux操作系统下。Ethereal包含AFS/LMP，SOCKS/RSVP分析器分析各种协议。 Ethereal包含的AFS/LMP/SOCKS/RSVP分析器存在漏洞，远程攻击者可以利用这些漏洞进行缓冲区溢出攻击，可能以Ethereal进程的权限在系统上执行任意指令。 Ethereal AFS分析器用于对AFS协议进行解码，在某些条件下，攻击者可以发送畸形的AFS数据导致Ethereal进程在解析时出现内存破坏并产生core dump，造成拒绝服务攻击。 Ethereal RSVP分析器用于对RSVP协议进行解码，在某些条件下，攻击者可以发送畸形的RSVP数据导致Ethereal进程在解析时出现内存破坏并产生core dump，造成拒绝服务攻击。 Ethereal SOCKS分析器用于对SOCKS数据进行解码，在某些条件下，攻击者可以发送畸形的SOCKS数据导致Ethereal进程在解析时出现内存破坏并产生core dump，造成拒绝服务攻击。 Ethereal LMP分析器用于对LMP协议进行解码，在某些条件下，攻击者可以发送畸形的LMP数据导致Ethereal进程在解析时出现内存破坏并产生core dump，造成拒绝服务攻击。
测试方法：	无
解决方法：	临时解决方法：如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： * 关闭有漏洞的AFS，LMP，SOCKS，RSVP剖析器功能。厂商补丁： Ethereal Group -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Ethereal Group Ethereal 0.8.18: Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm Ethereal Group Upgrade ethereal-0.9.5.tar.gz ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz Ethereal Group Ethereal 0.9 .0: Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm Ethereal Group Upgrade ethereal-0.9.5.tar.gz ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz Ethereal Group Ethereal 0.9.1: Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm Ethereal Group Upgrade ethereal-0.9.5.tar.gz ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz Ethereal Group Ethereal 0.9.2: Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm Ethereal Group Upgrade ethereal-0.9.5.tar.gz ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz Ethereal Group Ethereal 0.9.3: Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm Ethereal Group Upgrade ethereal-0.9.5.tar.gz ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz Ethereal Group Ethereal 0.9.4: Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm Ethereal Group Upgrade ethereal-0.9.5.tar.gz ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz