LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: October 20th, 2014
Linux Advisory Watch: October 17th, 2014
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Mandriva: Updated wireshark packages fix multiple vulnerabilities Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Mandrake Vulnerabilities in the LLT, IEEE 802.11, HTTP, and TCP dissectors were discovered in versions of wireshark less than 0.99.5, as well as various other bugs. This updated provides wireshark 0.99.5 which is not vulnerable to these issues.
 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDKSA-2007:033
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : wireshark
 Date    : February 2, 2007
 Affected: 2007.0, Corporate 4.0
 _______________________________________________________________________
 
 Problem Description:
 
 Vulnerabilities in the LLT, IEEE 802.11, HTTP, and TCP dissectors were
 discovered in versions of wireshark less than 0.99.5, as well as
 various other bugs.

 This updated provides wireshark 0.99.5 which is not vulnerable to these
 issues.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0456
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0457
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0458
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0459
 http://www.wireshark.org/security/wnpa-sec-2007-01.html
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.0:
 740873204531526e4cc6878444af8362  2007.0/i586/libwireshark0-0.99.5-0.1mdv2007.0.i586.rpm
 add82ec56d6f77ee7368cd080a82a465  2007.0/i586/tshark-0.99.5-0.1mdv2007.0.i586.rpm
 d193c2b44c08aac1b67d64613532ef80  2007.0/i586/wireshark-0.99.5-0.1mdv2007.0.i586.rpm
 858bbb85edc9783b155ef0a0ac6c3b90  2007.0/i586/wireshark-tools-0.99.5-0.1mdv2007.0.i586.rpm 
 1df4c1838fe6b746a782e133de279827  2007.0/SRPMS/wireshark-0.99.5-0.1mdv2007.0.src.rpm

 Mandriva Linux 2007.0/X86_64:
 8ef87dcfc0cc5ac18a31945959e7aa7c  2007.0/x86_64/lib64wireshark0-0.99.5-0.1mdv2007.0.x86_64.rpm
 a3f7656a6b2c90d23bac921d472bffaf  2007.0/x86_64/tshark-0.99.5-0.1mdv2007.0.x86_64.rpm
 81050abf3144fd206f8a2f0a7e910836  2007.0/x86_64/wireshark-0.99.5-0.1mdv2007.0.x86_64.rpm
 b2f12630475a24dec626092e231cc24a  2007.0/x86_64/wireshark-tools-0.99.5-0.1mdv2007.0.x86_64.rpm 
 1df4c1838fe6b746a782e133de279827  2007.0/SRPMS/wireshark-0.99.5-0.1mdv2007.0.src.rpm

 Corporate 4.0:
 26813537c4e24420d2cb1bbcbaad3185  corporate/4.0/i586/libwireshark0-0.99.5-0.1.20060mlcs4.i586.rpm
 55d76fd9bc65b2cd4eb602a8e8b034d1  corporate/4.0/i586/tshark-0.99.5-0.1.20060mlcs4.i586.rpm
 8aaf460bab2133abe4c7d5973f190d8c  corporate/4.0/i586/wireshark-0.99.5-0.1.20060mlcs4.i586.rpm
 4b12b3ad9f259bb9099208cb530bc42d  corporate/4.0/i586/wireshark-tools-0.99.5-0.1.20060mlcs4.i586.rpm 
 5937c2654ada4050818cc4d2f88d13ce  corporate/4.0/SRPMS/wireshark-0.99.5-0.1.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 b6da34d5d4f983d981f298b20f26222c  corporate/4.0/x86_64/lib64wireshark0-0.99.5-0.1.20060mlcs4.x86_64.rpm
 1a7b1c1d3c142f7e735f0b4e94b6fee8  corporate/4.0/x86_64/tshark-0.99.5-0.1.20060mlcs4.x86_64.rpm
 103ef9c506489cf585aa01bf71c8e24a  corporate/4.0/x86_64/wireshark-0.99.5-0.1.20060mlcs4.x86_64.rpm
 b9b872ed0afc643f40fc35983d0a7302  corporate/4.0/x86_64/wireshark-tools-0.99.5-0.1.20060mlcs4.x86_64.rpm 
 5937c2654ada4050818cc4d2f88d13ce  corporate/4.0/SRPMS/wireshark-0.99.5-0.1.20060mlcs4.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  
 
< Prev   Next >
    
Partner

 

Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Hacker Halted 2014: Johnny Long Calls for Hackers for Charity Volunteers
RIPS – Static Source Code Analysis For PHP Vulnerabilities
Finding a Video Poker Bug Made These Guys Rich—Then Vegas Made Them Pay
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2014 Guardian Digital, Inc. All rights reserved.