Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 212149 - net-analyzer/wireshark < 0.99.8 Multiple vulnerabilities (CVE-2008-{1070,1071,1072})
Summary: net-analyzer/wireshark < 0.99.8 Multiple vulnerabilities (CVE-2008-{1070,1071...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL: http://www.wireshark.org/security/wnp...
Whiteboard: B2 [glsa]
Keywords:
Depends on: 212075 213705
Blocks:
  Show dependency tree
 
Reported: 2008-03-03 01:42 UTC by Robert Buchholz (RETIRED)
Modified: 2008-03-31 12:56 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Robert Buchholz (RETIRED) gentoo-dev 2008-03-03 01:42:48 UTC
CVE-2008-1070 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1070):
  The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7
  allows remote attackers to cause a denial of service (crash) via a malformed
  packet.

CVE-2008-1071 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1071):
  The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7
  allows remote attackers to cause a denial of service (crash) via a malformed
  packet.

CVE-2008-1072 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1072):
  The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7,
  when running on Ubuntu 7.10, allows remote attackers to cause a denial of
  service (crash or memory consumption) via a malformed packet, possibly
  related to a Cairo library bug.
Comment 1 Robert Buchholz (RETIRED) gentoo-dev 2008-03-03 01:46:23 UTC
I'm rating this B2 because since our last bug we encourage users to run Wireshark not as root. I hope this is appropriate, otherwise it'd be B1 as usual.

Peter, please bump and let's go to stabling.
Comment 2 Peter Volkov (RETIRED) gentoo-dev 2008-03-03 05:25:00 UTC
Will do later today. I just want to give ppc64 and alpha arch teams some time to keyword libsmi.
Comment 3 Peter Volkov (RETIRED) gentoo-dev 2008-03-16 20:02:21 UTC
wireshark-0.99.8.ebuild is finally in portage.
Comment 4 Robert Buchholz (RETIRED) gentoo-dev 2008-03-17 01:25:20 UTC
Arches, please test and mark stable:
=net-analyzer/wireshark-0.99.8
Target keywords : "alpha amd64 hppa ia64 ppc ppc64 release sparc x86"
Comment 5 Angelo Arrifano (RETIRED) gentoo-dev 2008-03-17 12:31:06 UTC
net-analyzer/wireshark-0.99.8 USE="caps%* gtk pcre%* threads zlib%* -adns -gcrypt% -gnutls% -ipv6 -kerberos -lua% -pcap% -portaudio -profile% (-selinux) -smi% (-snmp%) (-ssl%*)"


* Emerges on AMD64.
* Works.

- -

Portage 2.1.4.4 (default-linux/amd64/2007.0, gcc-4.1.2, glibc-2.6.1-r0, 2.6.24-gentoo-r3 x86_64)
=================================================================
System uname: 2.6.24-gentoo-r3 x86_64 AMD Turion(tm) 64 X2 Mobile Technology TL-56
Timestamp of tree: Mon, 17 Mar 2008 11:30:01 +0000
distcc 2.18.3 x86_64-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
app-shells/bash:     3.2_p17-r1
dev-java/java-config: 1.3.7, 2.0.33-r1
dev-lang/python:     2.4.4-r9
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r1
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=k8 -Os -msse3 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-march=k8 -Os -msse3 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="collision-protect distlocks metadata-transfer multilib-strict parallel-fetch sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://213.186.33.37/gentoo-distfiles/"
LANG="en_US"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dnow 3dnowext X a52 aac acpi alsa amd64 amr amrnb amrwb bash-completion berkdb branding bzip2 cairo cli cracklib crypt cups dbus devhelp divx doc dvd dvdr emerald fam ffmpeg firefox flac fortran gd gdbm gif glade glib glitz gtk gtkspell hal hddtemp iconv imagemagick insecure-savers isdnlog javascript jpeg jpeg2k kqemu libcaca libnotify midi mmx mmxext mp2 mp3 mp4 mpeg mplayer mudflap musicbrainz mysql ncurses nls nptl nptlonly offensive ogg opengl openmp pam pcre png pppd python quicktime readline realmedia reflection samba sdl session smp sndfile sourceview spell spl sse sse2 ssl stream svg syslog taglib tcpd threads truetype type1 unicode v4l v4l2 vhosts vim-syntax vorbis wifi wmp xcomposite xorg xosd xpm xscreensaver xvid zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev synaptics joystick" KERNEL="linux" LCD_DEVICES="xosd" USERLAND="GNU" VIDEO_CARDS="nv nvidia none"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 6 Olivier Crete (RETIRED) gentoo-dev 2008-03-17 13:19:34 UTC
amd64 stable
Comment 7 Dawid Węgliński (RETIRED) gentoo-dev 2008-03-17 13:59:23 UTC
x86 stable
Comment 8 Dawid Węgliński (RETIRED) gentoo-dev 2008-03-17 15:06:26 UTC
*** Bug 213705 has been marked as a duplicate of this bug. ***
Comment 9 Doug Goldstein (RETIRED) gentoo-dev 2008-03-17 15:10:35 UTC
I don't understand how a build failure is a duplicate of this bug.. But USE=kerberos results in this failing to build.
Comment 10 Dawid Węgliński (RETIRED) gentoo-dev 2008-03-17 15:11:50 UTC
Readding amd64 per bug #213705. Decide whether revert it back to ~amd64 or not.
Comment 11 Olivier Crete (RETIRED) gentoo-dev 2008-03-17 15:24:49 UTC
We can revert.. or just fix it...
Comment 12 Doug Goldstein (RETIRED) gentoo-dev 2008-03-17 15:28:26 UTC
It's not amd64 specific. It's an issue with the options passed to the configure script with certain USE flag combinations. Same issue exists on my x86 box.
Comment 13 Angelo Arrifano (RETIRED) gentoo-dev 2008-03-17 15:55:52 UTC
I can't reproduce #213705.

net-analyzer/wireshark-0.99.8  USE="caps gtk kerberos pcre threads zlib -adns
-gcrypt -gnutls -ipv6 -lua -pcap -portaudio -profile (-selinux) -smi"

Emerges fine on this AMD64.
Comment 14 Doug Goldstein (RETIRED) gentoo-dev 2008-03-17 16:20:38 UTC
What kerberos implementation are you using?
Comment 15 Angelo Arrifano (RETIRED) gentoo-dev 2008-03-17 16:35:31 UTC
Kerberos was not present on my system (as I don't use it). Emerging USE="kerberos" wireshark pulled in this:

app-crypt/mit-krb5-1.5.3-r1  USE="doc -ipv6 -krb4 -tcl"
Comment 16 Doug Goldstein (RETIRED) gentoo-dev 2008-03-17 16:39:17 UTC
Try heimdal:

[ebuild   R   ] app-crypt/heimdal-0.7.2-r3  USE="X berkdb ipv6 ldap ssl" 0 kB
Comment 17 Angelo Arrifano (RETIRED) gentoo-dev 2008-03-17 16:56:35 UTC
(In reply to comment #16)
> Try heimdal:
> 
> [ebuild   R   ] app-crypt/heimdal-0.7.2-r3  USE="X berkdb ipv6 ldap ssl" 0 kB
> 

I can reproduce with this implementation.
Comment 18 Dawid Węgliński (RETIRED) gentoo-dev 2008-03-17 18:22:06 UTC
Cant're reproduce it on my x86 box either.

* app-crypt/mit-krb5 [R 1.5.3-r1]
    -doc ipv6 -krb4 -tcl
* net-analyzer/wireshark [R 0.99.8] <target>
    -adns caps -gcrypt -gnutls -gtk ipv6 kerberos -lua -pcap pcre -portaudio -profile (-selinux) -smi -threads zlib

x86: what do we do?
Comment 19 Christian Faulhammer (RETIRED) gentoo-dev 2008-03-17 18:36:04 UTC
(In reply to comment #18)
> Cant're reproduce it on my x86 box either.
> 
> * app-crypt/mit-krb5 [R 1.5.3-r1]
>     -doc ipv6 -krb4 -tcl
> * net-analyzer/wireshark [R 0.99.8] <target>
>     -adns caps -gcrypt -gnutls -gtk ipv6 kerberos -lua -pcap pcre -portaudio
> -profile (-selinux) -smi -threads zlib
> 
> x86: what do we do?

 Try with heimdal, as suggested above...and then revert if it is really broken.  But check if it is broken with the prior stable version.  If yes, keep the stable keyword.
Comment 20 Peter Volkov (RETIRED) gentoo-dev 2008-03-17 19:10:11 UTC
Guys, you are welcome to document all your finding in bug 213705, and please comment suggested there solution. This bug about security issue.

BTW this minor build problem should not stop stabilization. Also no need for amd64 to revert keywords - this is really small configuration issue.
Comment 21 Robert Buchholz (RETIRED) gentoo-dev 2008-03-17 21:26:59 UTC
Here we go again, compilation error fixed. Arches, please stable our refreshed ebuild.
Comment 22 Olivier Crete (RETIRED) gentoo-dev 2008-03-17 21:37:44 UTC
amd64 already done
Comment 23 Markus Meier gentoo-dev 2008-03-17 21:40:56 UTC
so is x86
Comment 24 Jeroen Roovers (RETIRED) gentoo-dev 2008-03-17 23:02:01 UTC
Stable for HPPA (net-libs/libsmi too).
Comment 25 Tobias Scherbaum (RETIRED) gentoo-dev 2008-03-18 18:05:42 UTC
ppc stable
Comment 26 Markus Rothe (RETIRED) gentoo-dev 2008-03-19 11:45:15 UTC
ppc64 stable
Comment 27 Raúl Porcel (RETIRED) gentoo-dev 2008-03-19 19:22:49 UTC
uh...alpha/ia64/sparc stable
Comment 28 Peter Volkov (RETIRED) gentoo-dev 2008-03-19 20:41:59 UTC
Fixed in release snapshot.
Comment 29 Robert Buchholz (RETIRED) gentoo-dev 2008-03-21 02:18:36 UTC
request filed
Comment 30 Christian Faulhammer (RETIRED) gentoo-dev 2008-03-31 09:50:48 UTC
Isn't this handled in GLSA 200803-23? http://www.gentoo.org/security/en/glsa/glsa-200803-32.xml
Comment 31 Robert Buchholz (RETIRED) gentoo-dev 2008-03-31 12:56:34 UTC
true, thanks for noticing.