Ethereal OSPF协议处理单元栈溢出漏洞

发布日期：2005-12-09
更新日期：2005-12-13

受影响系统：

Ethereal Group Ethereal <= 0.10.13

描述：

---

BUGTRAQ ID: 15794
CVE(CAN) ID: CVE-2005-3651

Ethereal是一款开放源码的网络协议分析工具。

Ethereal用于分析OSPF协议的组件中存在栈溢出漏洞，远程攻击者可以利用这个漏洞导致拒绝服务或执行任意代码。

dissect_ospf_v3_address_prefix()函数中没有执行边界检查。该函数可能将用户输入的二进制数据转换成可读字符串，但没有对输入数据执行长度检查便使用栈中固定长度的缓冲区来存储所创建的字符串。如果生成的输入长度超过了缓冲区大小，便可能出现堆溢出。


<*来源：iDEFENSE

链接：http://www.idefense.com/application/poi/display?id=349&type=vulnerabilities
http://www.debian.org/security/2005/dsa-920
*>

建议：

---

临时解决方法：

* 在Ethereal中禁用OSPF报文处理单元。

厂商补丁：

Debian
------
Debian已经为此发布了一个安全公告（DSA-920-1）以及相应补丁:
DSA-920-1：New ethereal packages fix arbitrary code execution
链接：http://www.debian.org/security/2005/dsa-920

补丁下载：
Source archives:

http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody14.dsc
Size/MD5 checksum: 681 fd2549fde25a12ea89ff76f16f476a1b
http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody14.diff.gz
Size/MD5 checksum: 46176 b28a169806ac6c7357bc59cb684ce067
http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4.orig.tar.gz
Size/MD5 checksum: 3278908 42e999daa659820ee93aaaa39ea1e9ea

Alpha architecture:

http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody14_alpha.deb
Size/MD5 checksum: 1941098 7ea04145418237e513e15021dc7f7b95
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody14_alpha.deb
Size/MD5 checksum: 334948 cef7bebe414cbf9d7ba06dded593e087
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody14_alpha.deb
Size/MD5 checksum: 223218 648d49081514871e244690c8d5f33691
http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody14_alpha.deb
Size/MD5 checksum: 1708326 42b0e3d2014feb624df9b899ff620a0b

ARM architecture:

http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody14_arm.deb
Size/MD5 checksum: 1635960 b04119f7705cf79e7172f1d18948fa8d
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody14_arm.deb
Size/MD5 checksum: 298554 3fd358c7da7eb738eb6873ef7af66d7f
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody14_arm.deb
Size/MD5 checksum: 207122 45c7b2fd84a7eb3e36e8d69ea9b6dcdf
http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody14_arm.deb
Size/MD5 checksum: 1440018 9e3b3a723071fbd018ad3ac73183da68

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody14_i386.deb
Size/MD5 checksum: 1513538 b953ab41e1961c68629b925bbc56dd83
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody14_i386.deb
Size/MD5 checksum: 287406 5ef238518e168e5a46319493c15c4e19
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody14_i386.deb
Size/MD5 checksum: 199112 56c7fb6de85158b326b90488a0752cb1
http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody14_i386.deb
Size/MD5 checksum: 1327200 3efaf5307fd7d6f34814e155caa33a7a

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody14_ia64.deb
Size/MD5 checksum: 2150464 14f206f1245e654828dc70458d7b6ec6
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody14_ia64.deb
Size/MD5 checksum: 373888 3e18fd820eaef70e178e1e54f35b163b
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody14_ia64.deb
Size/MD5 checksum: 234768 0e01b34d747883840309fbe0a82b9d90
http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody14_ia64.deb
Size/MD5 checksum: 1862118 759d0b8533a34f25e2cd44e77b22b4c8

HP Precision architecture:

http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody14_hppa.deb
Size/MD5 checksum: 1805078 e84cbe1d3502ddaf4d34e3a969a14736
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody14_hppa.deb
Size/MD5 checksum: 323354 37c86ac01668a204d7808a9fdcbb81be
http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody14_hppa.deb

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有