-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

            ESB-2005.0072 -- Debian Security Advisory DSA 653-1
                 New ethereal packages fix buffer overflow
                              24 January 2005

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           ethereal 0.10.8 and prior
Publisher:         Debian
Operating System:  Debian GNU/Linux 3.0
                   Linux variants
                   UNIX variants
                   Windows
Impact:            Execute Arbitrary Code/Commands
                   Denial of Service
Access:            Remote/Unauthenticated
CVE Names:         CAN-2005-0084

Original Bulletin: http://www.debian.org/security/2005/dsa-653

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------------
Debian Security Advisory DSA 653-1                     security@debian.org
http://www.debian.org/security/                             Martin Schulze
January 21st, 2005                      http://www.debian.org/security/faq
- - --------------------------------------------------------------------------

Package        : ethereal
Vulnerability  : buffer overflow
Problem-Type   : remote
Debian-specific: no
CVE ID         : CAN-2005-0084

A buffer overflow has been detected in the X11 dissector of ethereal,
a commonly used network traffic analyser.  A remote attacker may be
able to overflow a buffer using a specially crafted IP packet.  More
problems have been discovered which don't apply to the version in
woody but are fixed in sid as well.

For the stable distribution (woody) this problem has been fixed in
version 0.9.4-1woody11.

For the unstable distribution (sid) this problem has been fixed in
version 0.10.9-1.

We recommend that you upgrade your ethereal package.


Upgrade Instructions
- - --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- - --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11.dsc
      Size/MD5 checksum:      681 8e8bbe73bf65d45446fb7c03dddb41a1
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11.diff.gz
      Size/MD5 checksum:    40601 a9a6e17ee6c2e1749ac3d140628c77c6
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4.orig.tar.gz
      Size/MD5 checksum:  3278908 42e999daa659820ee93aaaa39ea1e9ea

  Alpha architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_alpha.deb
      Size/MD5 checksum:  1941102 aab1360769a64476ce4113068230c8ad
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_alpha.deb
      Size/MD5 checksum:   334424 c3647ca04af3f48b4e24ec6ae2fa6b4d
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_alpha.deb
      Size/MD5 checksum:   222460 06e7e8c5713efa6f102bb436c6251e61
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_alpha.deb
      Size/MD5 checksum:  1707844 08f64c248a99394a8366ca5b512e096d

  ARM architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_arm.deb
      Size/MD5 checksum:  1635456 190bd5415abaf62c1cde340605079152
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_arm.deb
      Size/MD5 checksum:   297770 6d5ee1df687aeee0e49d4bc27cfab0da
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_arm.deb
      Size/MD5 checksum:   206356 fcba9b5be975e62bd5cf8efca338a299
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_arm.deb
      Size/MD5 checksum:  1439676 d825f5c16e37f1a5c1a7aaa6ba0798b1

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_i386.deb
      Size/MD5 checksum:  1513338 996070722f320a6d6d40652101480ec6
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_i386.deb
      Size/MD5 checksum:   286736 69fd768db07ee2ac52b33f3188fdba97
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_i386.deb
      Size/MD5 checksum:   198652 50e416b732e5d02d1f8e6bfb5269d1f9
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_i386.deb
      Size/MD5 checksum:  1326536 c8415c2297b0bc30a297b3b07e0a1186

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_ia64.deb
      Size/MD5 checksum:  2150414 b46cc7da4c46e2a920299cef6d6f1f1c
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_ia64.deb
      Size/MD5 checksum:   373372 1b977535a20b449ea7c1b21e09f9493b
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_ia64.deb
      Size/MD5 checksum:   234004 e8c69f3f1db9708ceb2e74122e81c168
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_ia64.deb
      Size/MD5 checksum:  1861780 6c48358d2c8c892d24ebbc29b020931d

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_hppa.deb
      Size/MD5 checksum:  1804712 495491720997b53f60f5b9dbfeabac27
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_hppa.deb
      Size/MD5 checksum:   322696 cccbc77685f25eb8aa1a8429e0298dd7
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_hppa.deb
      Size/MD5 checksum:   217116 3bcb0ff60d01b12b85d25ee6e277fbe2
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_hppa.deb
      Size/MD5 checksum:  1576164 67ecb81ffa522198b999353ce6294b19

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_m68k.deb
      Size/MD5 checksum:  1424704 7014155418ca6c1947e71a04ab716b03
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_m68k.deb
      Size/MD5 checksum:   282996 c73d8c241771bbe5f89c1e859e436aba
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_m68k.deb
      Size/MD5 checksum:   195364 21d07bf8bb05d52dfd45d91c73c656a6
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_m68k.deb
      Size/MD5 checksum:  1248922 5cd077cf05e8e14f627a10e44ced739d

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_mips.deb
      Size/MD5 checksum:  1617160 41dd4cd8059c472ff109bb002d9b5074
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_mips.deb
      Size/MD5 checksum:   305514 855a56f8596f0bb4da7fe0024616d87a
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_mips.deb
      Size/MD5 checksum:   213936 8459c58071700c436ea96af9a6fd7901
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_mips.deb
      Size/MD5 checksum:  1422110 bdcdf3c021429ccaf8eb95027a48f69e

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_mipsel.deb
      Size/MD5 checksum:  1598210 0c60efc6fcdea7d25359ecd88dd8aeff
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_mipsel.deb
      Size/MD5 checksum:   304982 63cea39a93b19891ae0bbfaa8c5e0327
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_mipsel.deb
      Size/MD5 checksum:   213596 e7d160f30cd5e9360fc90d4ef160dfb6
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_mipsel.deb
      Size/MD5 checksum:  1406444 e8f3d141f724da42a16d051c12879efb

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_powerpc.deb
      Size/MD5 checksum:  1618676 f3890280569d1b2a7e66c039c0def6b4
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_powerpc.deb
      Size/MD5 checksum:   302174 d5c364dcb6039f637005c4ce259bed2c
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_powerpc.deb
      Size/MD5 checksum:   209172 ae06ac9e4e976d4fd846b3b222efe911
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_powerpc.deb
      Size/MD5 checksum:  1419454 2a6a56b278e0e647cbb7c41881e5aaa0

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_s390.deb
      Size/MD5 checksum:  1574786 17c662f34613b6b0fb24e033dd1fc463
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_s390.deb
      Size/MD5 checksum:   301014 7f0c78cce38eb8927b708146cb4b8463
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_s390.deb
      Size/MD5 checksum:   204250 f85efb4e0c75da840c7b1224292f7005
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_s390.deb
      Size/MD5 checksum:  1387552 c4e2e39307ca9b70793e1b8a6dc9a3ee

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_sparc.deb
      Size/MD5 checksum:  1583368 199f9efbe4d98e43882bb28d054c8ff6
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_sparc.deb
      Size/MD5 checksum:   318282 87d2b4c8298e3e179d89aa3827602011
    http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_sparc.deb
      Size/MD5 checksum:   205026 0c71e4c61947bc0f198de8d66a1892b4
    http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_sparc.deb
      Size/MD5 checksum:  1389390 8327f812bcaee04cf83fc34f8450aacc


  These files will probably be moved into the stable distribution on
  its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB8OiHW5ql+IAeqTIRAhEJAJ9dEuKVcXscQbAZrd6VmZ0de5Ou6wCcDHAN
gcBn2Bp/9cc2FXzr5L6ccps=
=2QHP
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBQfQ6sSh9+71yA2DNAQLqzgP+P/Lb/7rQN1gkkA7riEKR23PGOiakzSxD
bEzC3SHG/cfnO/nlIy7iSC/Ja91xVbsHbP4DklTL0slTpiyr4lxcoH84GbBJrjIR
H5fMrTkeZCJlztIqjQUbRRPBJTrMxG/VLL2fs2rHEih9fSFEn199FxHj6CW85vW8
6dDPV162Ifs=
=0MwV
-----END PGP SIGNATURE-----