Your message dated Tue, 05 Sep 2017 10:54:16 +0000
with message-id <[email protected]>
and subject line Bug#549017: fixed in yersinia 0.8.2-1
has caused the Debian Bug report #549017,
regarding yersinia: reversed IP addresses parameters on command line
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
549017: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=549017
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: yersinia
Version: 0.7.1-1.1
Severity: normal
Tags: patch
The IP addresses passed as command line parameters have their bytes
reversed in the generated packet. For instance in the example below,
the -ipsource parameter 10.11.22.33 is changed to 33.22.11.10.
# yersinia dot1q -attack 1 -interface eth1 -dest 11:22:33:44:55:66
-ipsource 10.11.22.33 -ipdest 10.77.88.99 -vlan1 1111 -vlan2 2222
<*> Starting NONDOS attack sending 802.1Q double enc. packet...
....
tcpdump output:
11:38:27.029116 0e:c4:36:08:12:20 > 11:22:33:44:55:66, ethertype
802.1Q (0x8100), length 58: ethertype 802.1Q, ethertype IPv4, (tos
0x0, ttl 64, id 66, offset 0, flags [none], proto ICMP (1), length 36)
33.22.11.10 > 99.88.77.10: ICMP echo request, id 66, seq 66, length 16
The attached patch seems to cure the problem for the few cases I have
tried. It removes the call to ntohl(). I hope it makes sense.
In case you wonder, the second change was done to help to distinguish
between two otherwise identical error messages.
BTW, I packaged the latest snapshot (+svn48) to check if the bug was fixed
here (no) and for information the debian patch applies cleanly.
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing'), (100, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.30
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/dash
Versions of packages yersinia depends on:
ii libatk1.0-0 1.28.0-1 The ATK accessibility toolkit
ii libc6 2.9-26 GNU C Library: Shared libraries
ii libcairo2 1.8.8-2 The Cairo 2D vector graphics libra
ii libfontconfig1 2.6.0-4 generic font configuration library
ii libfreetype6 2.3.9-5 FreeType 2 font engine, shared lib
ii libglib2.0-0 2.22.0-1 The GLib library of C routines
ii libgtk2.0-0 2.18.0-1 The GTK+ graphical user interface
ii libncurses5 5.7+20090803-2 shared libraries for terminal hand
ii libnet1 1.1.4-2 library for the construction and h
ii libpango1.0-0 1.26.0-1 Layout and rendering of internatio
ii libpcap0.8 1.0.0-4 system interface for user-level pa
yersinia recommends no packages.
yersinia suggests no packages.
-- no debconf information
Thank you
--
Michel Casabona
--- yersinia/src/parser.c 2008-06-06 08:02:13.000000000 +0200
+++ yersinia-0.7.1+svn48/src/parser.c 2009-09-30 12:04:57.000000000 +0200
@@ -1714,13 +1714,14 @@
return -1;
}
+ /*
if (comm_par[j].type == FIELD_IP)
{
memcpy((void *)&aux_long, (void *)node->protocol[proto].commands_param[j], 4);
aux_long = ntohl(aux_long);
memcpy((void *)node->protocol[proto].commands_param[j], (void *)&aux_long, 4);
}
-
+ */
if (comm_par[j].filter) /* Use specific filter for this param */
{
@@ -1728,7 +1729,7 @@
fail = (comm_par[j].filter((void *)node,node->protocol[proto].commands_param[j],*(aux_args+1)));
if (fail == -1)
{
- write_log(2," Bad value '%s' for parameter '%s'!!\n",*(aux_args+1),param);
+ write_log(2," Bad value '%s' for parameter '%s'!!!\n",*(aux_args+1),param);
return -1;
}
}
--- End Message ---
--- Begin Message ---
Source: yersinia
Source-Version: 0.8.2-1
We believe that the bug you reported is fixed in the latest version of
yersinia, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Noël Köthe <[email protected]> (supplier of updated yersinia package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 28 Aug 2017 18:09:19 +0200
Source: yersinia
Binary: yersinia
Architecture: source amd64
Version: 0.8.2-1
Distribution: unstable
Urgency: medium
Maintainer: Noël Köthe <[email protected]>
Changed-By: Noël Köthe <[email protected]>
Description:
yersinia - Network vulnerabilities check software
Closes: 549017 783385
Changes:
yersinia (0.8.2-1) unstable; urgency=medium
.
* new upstream release from 2017-08-25
* fixed closes: Bug#549017
* 0.8.1 fixed STP crash (MitM) closes: Bug#783385
* debian/control updated Standard-Version, no changes
Checksums-Sha1:
9ffda3b865eb0892680a9aa1fbdff42da649870b 1807 yersinia_0.8.2-1.dsc
a392f9e2d81ff5e7228b29475a068dc316a8cce3 387889 yersinia_0.8.2.orig.tar.gz
ca9d898141e459579814fe3e15995c81577b2dfb 5000 yersinia_0.8.2-1.debian.tar.xz
bb19cea0c5712fbe5712f2bf5751e62dbb9a0346 467514
yersinia-dbgsym_0.8.2-1_amd64.deb
1049b803690be8a64241cffefc78e01c27b4fe49 10861 yersinia_0.8.2-1_amd64.buildinfo
dcc34707bdd7fdb62d9004459a3e30999b087019 165378 yersinia_0.8.2-1_amd64.deb
Checksums-Sha256:
e98e5d0fa3f295ee941fcb3fec4d75434f66f49a46396545ce45cb159b50c3c2 1807
yersinia_0.8.2-1.dsc
964f528dbffd904376ab7986e69b1e8639591c929e2f39186ac9ebf2d3bc761f 387889
yersinia_0.8.2.orig.tar.gz
51809d1f19f192b8fa8b1ae3c6202bf2369b9cdd6690461f6400f1cd219ec460 5000
yersinia_0.8.2-1.debian.tar.xz
3d96909fa3c678db3d1e3b0edaac1eb42a5a566534d8537ba7e0644d72e16176 467514
yersinia-dbgsym_0.8.2-1_amd64.deb
b810980d1f97dd49022a28924cef00d4c1e9500cce5a333a683d402d109030d9 10861
yersinia_0.8.2-1_amd64.buildinfo
4b59ceffc08099c5c46208cdd84cc6614c231f7d60a21f90a65bb3a7aa94d87c 165378
yersinia_0.8.2-1_amd64.deb
Files:
c3cf54194511f66841eca956363e8ea9 1807 admin optional yersinia_0.8.2-1.dsc
b8f37e057698e89963ab7a2c936a3839 387889 admin optional
yersinia_0.8.2.orig.tar.gz
f872b248ae4e2aa82c881af2650257ef 5000 admin optional
yersinia_0.8.2-1.debian.tar.xz
dadb0280f78855e1bf7fb2b731eabdf8 467514 debug extra
yersinia-dbgsym_0.8.2-1_amd64.deb
5a79cc8005b4f5e76589b6853cb4d5dd 10861 admin optional
yersinia_0.8.2-1_amd64.buildinfo
4d93ba847d2307e3c871d04d4e759055 165378 admin optional
yersinia_0.8.2-1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=mOIK
-----END PGP SIGNATURE-----
--- End Message ---
