Re: Ethereal remote buffer overflow

[Diego Giagio <dgiagio@xxxxxxxxxxxx>]

> ---
> 
> Title                 :  Ethereal remote buffer overflow
> Advisory ID           :  LSS-2005-03-04
> Date                  :  08.03.2005 
> Advisory URL:         :  http://security.lss.hr/en/index.php?page=exp 
> Impact                        :  Stack overflow and possible code execution
> Risk level            :  High 
> Vulnerability type    :  Remote 
> Vendors contacted     :  Yes
> 
> ---

This vulnerability was first discovered by me, on 01/Mar/2005. The vendor was
immediatelly contacted, as you can see below:

http://marc.theaimsgroup.com/?l=ethereal-dev&m=110973103628823&w=2
http://marc.theaimsgroup.com/?l=ethereal-dev&m=110973731214683&w=2

This vulnerability wouldn't made public until the next Ethereal's version
comes out (hopefully 10 or 11 this month), as I dealed with the vendor.

A proof-of-concept remote root exploit was made by me, but will only be
publicized on schedule.


Diego Giagio