Vulnerabilities in the LLT, IEEE 802.11, HTTP, and TCP dissectors were discovered in versions of wireshark less than 0.99.5, as well as various other bugs.

This updated provides wireshark 0.99.5 which is not vulnerable to these issues.

Wireshark 0.99.5 fixes four vulnerabilities :

  - CVE-2007-0459 The TCP dissector could hang or crash

  - CVE-2007-0458 The HTTP dissector could crash

  - CVE-2007-0457 The IEEE 802.11 dissector could crash

  - CVE-2007-0456 The LLT dissector could crash

Red Hat セキュリティアドバイザリ 2007:0066 から：

様々なセキュリティ脆弱性を修正する新しい Wireshark パッケージが、現在利用可能です。Wireshark は以前、Ethereal として知られていました。

この更新は、Red Hat セキュリティレスポンスチームによりセキュリティインパクトが小さいと評価されています。

Wireshark はネットワークトラフィックをモニターするプログラムです。

Wireshark の LLT、IEEE 802.11、http、および tcp のプロトコルディセクタで、いくつかのサービス拒否のバグが見つかりました。Wireshark が無効な形式のパケットをネットワークから読み取った場合に、 Wireshark がクラッシュしたり、応答を停止したりする可能性がありました。（CVE-2007-0456、CVE-2007-0457、CVE-2007-0458、 CVE-2007-0459）

Wireshark のユーザーは、これらの問題に対して脆弱でない Wireshark バージョン 0.99.5 が含まれる更新済みパッケージへアップグレードする必要があります。

來自 Red Hat 安全性公告 2007:0066：

現已提供新的 Wireshark 套件，可修正數個安全性弱點。Wireshark 之前稱為 Ethereal。

Red Hat 安全性回應團隊已將此更新評等為具有低安全性影響。

Wireshark 是用於監控網路流量的程式。

在 Wireshark 的 LLT、IEEE 802.11、http 和 tcp 通訊協定解剖器中發現數個拒絕服務錯誤。如果從網路讀取格式有誤的封包，Wireshark 可能損毀或停止回應。(CVE-2007-0456、CVE-2007-0457、CVE-2007-0458、CVE-2007-0459)

Wireshark 使用者應升級至這些更新版套件，其中包含 Wireshark 0.99.5 版，此版本不會受到這些問題影響。

- multiple security issues fixed (#227140)

    - CVE-2007-0459 - The TCP dissector could hang or crash       while reassembling HTTP packets

  - CVE-2007-0459 - The HTTP dissector could crash.

    - CVE-2007-0457 - On some systems, the IEEE 802.11       dissector could crash.

  - CVE-2007-0456 - On some systems, the LLT dissector could     crash.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

From Red Hat Security Advisory 2007:0066 :

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal.

This update has been rated as having low security impact by the Red Hat Security Response Team.

Wireshark is a program for monitoring network traffic.

Several denial of service bugs were found in Wireshark's LLT, IEEE 802.11, http, and tcp protocol dissectors. It was possible for Wireshark to crash or stop responding if it read a malformed packet off the network. (CVE-2007-0456, CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)

Users of Wireshark should upgrade to these updated packages containing Wireshark version 0.99.5, which is not vulnerable to these issues.

来自 Red Hat 安全公告 2007:0066：

新的 Wireshark 程序包修复了各种安全漏洞，现在可用。Wireshark 之前被称为 Ethereal。

Red Hat 安全响应团队将此更新评级为具有低安全影响。

Wireshark 是用于监视网络流量的程序。

在 Wireshark 的 LLT、IEEE 802.11、http 和 tcp 协议分析器中发现了多个拒绝服务缺陷。如果读取网络之外的畸形数据包，Wireshark 可能崩溃或停止响应。（CVE-2007-0456、CVE-2007-0457、CVE-2007-0458、CVE-2007-0459）

Wireshark 用户应升级这些更新后的程序包，其中包含 Wireshark 版本 0.99.5，该版本不受这些问题的影响。

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal.

This update has been rated as having low security impact by the Red Hat Security Response Team.

Wireshark is a program for monitoring network traffic.

Several denial of service bugs were found in Wireshark's LLT, IEEE 802.11, http, and tcp protocol dissectors. It was possible for Wireshark to crash or stop responding if it read a malformed packet off the network. (CVE-2007-0456, CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)

Users of Wireshark should upgrade to these updated packages containing Wireshark version 0.99.5, which is not vulnerable to these issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
24646	Mandrake Linux Security Advisory : wireshark (MDKSA-2007:033)	Nessus	Mandriva Local Security Checks	2007/2/18	2021/1/6	medium
27477	openSUSE 10 Security Update : wireshark (wireshark-2638)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
67449	Oracle Linux 3/4/5：wireshark（ELSA-2007-0066）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
67449	Oracle Linux 3 / 4 / 5 : wireshark (ELSA-2007-0066)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
24303	Fedora Core 5 : wireshark-0.99.5-1.fc5 (2007-207)	Nessus	Fedora Local Security Checks	2007/2/9	2021/1/11	medium
67449	Oracle Linux 3 / 4 / 5 : wireshark (ELSA-2007-0066)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
67449	Oracle Linux 3 / 4 / 5：wireshark (ELSA-2007-0066)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
24818	CentOS 3 / 4 : wireshark (CESA-2007:0066)	Nessus	CentOS Local Security Checks	2007/3/16	2021/1/4	medium
24833	RHEL 2.1 / 3 / 4 / 5 : wireshark (RHSA-2007:0066)	Nessus	Red Hat Local Security Checks	2007/3/16	2021/1/14	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium