发布日期：2002-06-28
更新日期：2002-07-15

受影响系统：

Ethereal Group Ethereal 0.9.4
Ethereal Group Ethereal 0.9.3
Ethereal Group Ethereal 0.9.2
Ethereal Group Ethereal 0.9.1
Ethereal Group Ethereal 0.9.0
Ethereal Group Ethereal 0.8.18
    - Linux系统  
    - Microsoft Windows XP
    - Microsoft Windows NT 4.0
    - Microsoft Windows 2000 SP3
    - Unix系统

不受影响系统：

Ethereal Group Ethereal 0.9.5

描述：

---

CVE(CAN) ID: CVE-2002-0822

Ethereal是一款网络协议分析软件，可使用在多种Unix和Linux操作系统下。Ethereal包含AFS/LMP，SOCKS/RSVP分析器分析各种协议。

Ethereal包含的AFS/LMP/SOCKS/RSVP分析器存在漏洞，远程攻击者可以利用这些漏洞进行缓冲区溢出攻击，可能以Ethereal进程的权限在系统上执行任意指令。

Ethereal AFS分析器用于对AFS协议进行解码，在某些条件下，攻击者可以发送畸形的AFS数据导致Ethereal进程在解析时出现内存破坏并产生core dump，造成拒绝服务攻击。

Ethereal RSVP分析器用于对RSVP协议进行解码，在某些条件下，攻击者可以发送畸形的RSVP数据导致Ethereal进程在解析时出现内存破坏并产生core dump，造成拒绝服务攻击。

Ethereal SOCKS分析器用于对SOCKS数据进行解码，在某些条件下，攻击者可以发送畸形的SOCKS数据导致Ethereal进程在解析时出现内存破坏并产生core dump，造成拒绝服务攻击。

Ethereal LMP分析器用于对LMP协议进行解码，在某些条件下，攻击者可以发送畸形的LMP数据导致Ethereal进程在解析时出现内存破坏并产生core dump，造成拒绝服务攻击。


<*链接：http://www.ethereal.com/appnotes/enpa-sa-00005.html
*>

建议：

---

临时解决方法：

如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：

* 关闭有漏洞的AFS，LMP，SOCKS，RSVP剖析器功能。

厂商补丁：

Ethereal Group
--------------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Ethereal Group Ethereal 0.8.18:

Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm

Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9 .0:

Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm

Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9.1:

Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm

Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9.2:

Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm

Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9.3:

Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm

Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

Ethereal Group Ethereal 0.9.4:

Conectiva RPM ethereal-0.9.5-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/ethereal-0.9.5-1U60_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/ethereal-0.9.5-1U70_1cl.i386.rpm

Conectiva RPM ethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-common-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-common-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-gtk-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-gtk-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM ethereal-utils-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/ethereal-utils-0.9.5-1U8_2cl.i386.rpm

Conectiva RPM tethereal-0.9.5-1U8_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/tethereal-0.9.5-1U8_2cl.i386.rpm

Ethereal Group Upgrade ethereal-0.9.5.tar.gz
ftp://ftp.ethereal.com/pub/ethereal/ethereal-0.9.5.tar.gz

浏览次数：4579
严重程度：0（网友投票）