drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Wireshark
Name: |
Mehrere Probleme in Wireshark |
|
ID: |
200708-12 |
|
Distribution: |
Gentoo |
|
Plattformen: |
Keine Angabe |
|
Datum: |
Do, 16. August 2007, 22:20 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3389
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3390
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3392
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3393 |
|
Applikationen: |
Wireshark |
|
Originalnachricht |
--64LDleNqNegJ4g97 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200708-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal Title: Wireshark: Multiple vulnerabilities Date: August 16, 2007 Bugs: #183520 ID: 200708-12
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis ========
Multiple vulnerabilities have been discovered in Wireshark, allowing for the remote execution of arbitrary code and a Denial of Service.
Background ==========
Wireshark is a network protocol analyzer with a graphical front-end.
Affected packages =================
------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-analyzer/wireshark < 0.99.6 >= 0.99.6
Description ===========
Wireshark doesn't properly handle chunked encoding in HTTP responses (CVE-2007-3389), iSeries capture files (CVE-2007-3390), certain types of DCP ETSI packets (CVE-2007-3391), and SSL or MMS packets (CVE-2007-3392). An off-by-one error has been discovered in the DHCP/BOOTP dissector when handling DHCP-over-DOCSIS packets (CVE-2007-3393).
Impact ======
A remote attacker could send specially crafted packets on a network being monitored with Wireshark, possibly resulting in the execution of arbitrary code with the privileges of the user running Wireshark which might be the root user, or a Denial of Service.
Workaround ==========
In order to prevent root compromise, take network captures with tcpdump and analyze them running Wireshark as a least privileged user.
Resolution ==========
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-0.99.6"
References ==========
[ 1 ] CVE-2007-3389 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3389 [ 2 ] CVE-2007-3390 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3390 [ 3 ] CVE-2007-3391 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3391 [ 4 ] CVE-2007-3392 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3392 [ 5 ] CVE-2007-3393 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3393
Availability ============
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200708-12.xml
Concerns? =========
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org.
License =======
Copyright 2007 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
--64LDleNqNegJ4g97 Content-Type: application/pgp-signature Content-Disposition: inline
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux)
iQEVAwUBRsSrkzvRww8BFPxFAQLy+gf/THBqcKMNecf7r/GkOLnEAjJaN8QSShSj SmBJ1FWKO1BqCDU+q15SsNkKYl5V+vWnCMs3ywdOpqLCkuXvkB4cgSn31srYZYql tqUnkOfhBnl1oXV4ZH1wBO4J0Hd/MuiD7bybnxHmB7h/f1/WR84keHrEb7qhJ5Im 7M/iUVMBOf1z+YbQvyhOa6OQfbx0ArHJBUUmaIp4q953phmRYZwFLyJCR6t+xJf7 8kKw+7WD9nNeOEEtRrT3DuYkzUen5T3/msVs7L0ny4TD5bzLM6wne3O+Eo6CPQvl CLfeIwDgDlIbC09VgV8C3rYugDhC3dn+RPJKYMvUQaiNpS1k0rFrqQ== =OVtY -----END PGP SIGNATURE-----
--64LDleNqNegJ4g97-- -- gentoo-announce@gentoo.org mailing list
|
|
|
|