Info

Disclosure

Jan 06, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in Ethereal. The BGP Dissector fails to check the bounds of the IPv6 label resulting in a stack overflow. With a specially crafted request, an attacker can potentially execute arbitrary code resulting in a loss of integrity. Due to the stacklayout, exploitation would be extremely difficult.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: OSVDB Verified

Solution

Upgrade to version 0.10.1 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: Disable the dissector

Products

Ethereal	Ethereal	0.10.0
		0.10.0a
		0.8.14
		0.8.15
		0.8.16
		0.8.17-a
		0.8.18
		0.8.19
		0.8.20
		0.9.x

References

Secunia Advisory ID: 11744
CERT VU: 119876
ISS X-Force ID: 15569
CVE ID: 2004-0176 (see also: NVD)
Related OSVDB ID: 4490 6887 6888 6889 6890 6891 6892 6894 6895 6896 6897 6898
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2004-03/0227.html
Vendor Specific Advisory URL: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835
http://www.debian.org/security/2004/dsa-511
http://www.ethereal.com/appnotes/enpa-sa-00013.html
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:024
Other Advisory URL: http://security.e-matters.de/advisories/032004.html
Vendor URL: http://www.ethereal.com/
CIAC Advisory: o-105
RedHat RHSA: RHSA-2004:136-09 RHSA-2004:137-07

Credit

Stefan Esser - sesserhardened-php.net - www.hardened-php.net

Direct URL: http://osvdb.org/36218