首页 -> 安全研究
安全研究
安全漏洞
Ethereal多个远程内存破坏漏洞
发布日期:2002-06-28
更新日期:2002-07-15
受影响系统:
Ethereal Group Ethereal 0.9.4不受影响系统:
Ethereal Group Ethereal 0.9.3
Ethereal Group Ethereal 0.9.2
Ethereal Group Ethereal 0.9.1
Ethereal Group Ethereal 0.9.0
Ethereal Group Ethereal 0.8.18
- Linux系统
- Microsoft Windows XP
- Microsoft Windows NT 4.0
- Microsoft Windows 2000 SP3
- Unix系统
Ethereal Group Ethereal 0.9.5描述:
CVE(CAN) ID: CVE-2002-0822
Ethereal是一款网络协议分析软件,可使用在多种Unix和Linux操作系统下。Ethereal包含AFS/LMP,SOCKS/RSVP分析器分析各种协议。
Ethereal包含的AFS/LMP/SOCKS/RSVP分析器存在漏洞,远程攻击者可以利用这些漏洞进行缓冲区溢出攻击,可能以Ethereal进程的权限在系统上执行任意指令。
Ethereal AFS分析器用于对AFS协议进行解码,在某些条件下,攻击者可以发送畸形的AFS数据导致Ethereal进程在解析时出现内存破坏并产生core dump,造成拒绝服务攻击。
Ethereal RSVP分析器用于对RSVP协议进行解码,在某些条件下,攻击者可以发送畸形的RSVP数据导致Ethereal进程在解析时出现内存破坏并产生core dump,造成拒绝服务攻击。
Ethereal SOCKS分析器用于对SOCKS数据进行解码,在某些条件下,攻击者可以发送畸形的SOCKS数据导致Ethereal进程在解析时出现内存破坏并产生core dump,造成拒绝服务攻击。
Ethereal LMP分析器用于对LMP协议进行解码,在某些条件下,攻击者可以发送畸形的LMP数据导致Ethereal进程在解析时出现内存破坏并产生core dump,造成拒绝服务攻击。
<*链接:http://www.ethereal.com/appnotes/enpa-sa-00005.html
*>
建议:
临时解决方法:
如果您不能立刻安装补丁或者升级,NSFOCUS建议您采取以下措施以降低威胁:
* 关闭有漏洞的AFS,LMP,SOCKS,RSVP剖析器功能。
厂商补丁:
Ethereal Group
--------------
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:
Ethereal Group Ethereal 0.8.18:
Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm
Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz
Ethereal Group Ethereal 0.9 .0:
Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm
Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz
Ethereal Group Ethereal 0.9.1:
Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm
Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz
Ethereal Group Ethereal 0.9.2:
Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm
Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz
Ethereal Group Ethereal 0.9.3:
Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm
Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz
Ethereal Group Ethereal 0.9.4:
Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm
Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm
Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm
Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz
浏览次数:4579
严重程度:0(网友投票)
绿盟科技给您安全的保障