Ethereal NTLMSSP解析器堆破壞漏洞

2019-11-04 11:46:11

字體：大中小

供稿：網(wǎng)友

受影響系統(tǒng)

Ethereal Group Ethereal 0.8.18
   - RedHat linux 7.2
   - RedHat Linux 7.2 i386
   - RedHat Linux 7.2 ia64
Ethereal Group Ethereal 0.9 .0
Ethereal Group Ethereal 0.9.1
   - Compaq Tru64 5.0
   - Debian Linux 2.2 68k
   - Debian Linux 2.2 alpha
   - Debian Linux 2.2 arm
   - Debian Linux 2.2 IA-32
   - Debian Linux 2.2 powerpc
   - Debian Linux 2.2 sparc
   - HP HP-UX 11.0
   - IBM AIX 5.1
   - Linux kernel 2.4
   - Microsoft windows 2000 PRofessional
   - Microsoft Windows 95
   - Microsoft Windows 98
   - Microsoft Windows 98SE
   - Microsoft Windows ME
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows xp
   - NetBSD NetBSD 1.5
   - OpenBSD OpenSSH 3.0
   - SCO Unixware 7.0
   - SGI IRIX 6.0
   - Sun Solaris 8.0
Ethereal Group Ethereal 0.9.2
Ethereal Group Ethereal 0.9.3
   + RedHat Linux 6.2 alpha
   + RedHat Linux 6.2 i386
   + RedHat Linux 6.2 sparc
   + RedHat Linux 7.0 alpha
   + RedHat Linux 7.0 i386
   + RedHat Linux 7.0 sparc
   + RedHat Linux 7.1 alpha
   + RedHat Linux 7.1 i386
   + RedHat Linux 7.1 ia64
   + RedHat Linux 7.2 alpha
   + RedHat Linux 7.2 i386
   + RedHat Linux 7.3
   + RedHat Linux 7.3 i386
Ethereal Group Ethereal 0.9.4
   + Debian Linux 3.0 alpha
   + Debian Linux 3.0 arm
   + Debian Linux 3.0 hppa
   + Debian Linux 3.0 ia-32
   + Debian Linux 3.0 ia-64
   + Debian Linux 3.0 m68k
   + Debian Linux 3.0 mips
   + Debian Linux 3.0 mipsel
   + Debian Linux 3.0 ppc
   + Debian Linux 3.0 s/390
   + Debian Linux 3.0 sparc
Ethereal Group Ethereal 0.9.5
Ethereal Group Ethereal 0.9.6
Ethereal Group Ethereal 0.9.7
Ethereal Group Ethereal 0.9.8
   + RedHat Linux 7.2
   + RedHat Linux 7.2 i386
   + RedHat Linux 7.2 ia64
   + RedHat Linux 7.3
   + RedHat Linux 7.3 i386
   + RedHat Linux 8.0
   + RedHat Linux 8.0 i386
Ethereal Group Ethereal 0.9.9

具體描述
Ethereal是網(wǎng)絡(luò)協(xié)議分析程序， NTLMSSP解析器是評估使用NTLM協(xié)議的包的機制。

其中在處理畸形NTLMSSP包的時候存在不明漏洞，可導(dǎo)致破破壞。存在執(zhí)行任意命令可能。

測試代碼
尚無

解決方案
補丁下載：

Ethereal Group Ethereal 0.8.18:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9 .0:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.1:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.2:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.3:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.4:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.5:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.6:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.7:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.8:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

Ethereal Group Ethereal 0.9.9:

Ethereal Group Upgrade ethereal-0.9.10.tar.gz
http://www.ethereal.com/distribution/ethereal-0.9.10.tar.gz

相關(guān)信息
Ethereal Group
參考：http://www.securityfocus.com/advisories/5076
相關(guān)主頁：http://www.ethereal.com/appnotes/enpa-sa-00008.Html

上一篇：命令行下可以解讀TCP數(shù)據(jù)報內(nèi)容的Sniffer

下一篇：Ethereal TVB_GET_NSTRINGZ0()內(nèi)存處理漏洞