Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Scientific Linux: CVE-2008-1070 Moderate: Wireshark Buffer Overflow

Calendar Oct 01, 2008 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow Moderate Wireshark scientific linux
Moderate: wireshark security update 
Date: Wed, 1 Oct 2008 15:25:40 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA for wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: wireshark security update
Issue date:	2008-10-01
CVE Names:	CVE-2008-1070 CVE-2008-1071 CVE-2008-1072
 CVE-2008-1561 CVE-2008-1562 CVE-2008-1563
 CVE-2008-3137 CVE-2008-3138 CVE-2008-3141
 CVE-2008-3145 CVE-2008-3146 CVE-2008-3932
 CVE-2008-3933 CVE-2008-3934

Multiple buffer overflow flaws were found in Wireshark. If Wireshark read
a malformed packet off a network, it could crash or, possibly, execute
arbitrary code as the user running Wireshark. (CVE-2008-3146)

Several denial of service flaws were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off a network, or
opened a malformed dump file. (CVE-2008-1070, CVE-2008-1071, CVE-2008-1072,
CVE-2008-1561, CVE-2008-1562, CVE-2008-1563, CVE-2008-3137, CVE-2008-3138,
CVE-2008-3141, CVE-2008-3145, CVE-2008-3932, CVE-2008-3933, CVE-2008-3934)

Additionally, this update changes the default Pluggable Authentication
Modules (PAM) configuration to always prompt for the root password before
each start of Wireshark. This avoids unintentionally running Wireshark with
root privileges.

SL 3.0.x

 SRPMS:
wireshark-1.0.3-EL3.3.src.rpm
 i386:
wireshark-1.0.3-EL3.3.i386.rpm
wireshark-gnome-1.0.3-EL3.3.i386.rpm
 x86_64:
wireshark-1.0.3-EL3.3.x86_64.rpm
wireshark-gnome-1.0.3-EL3.3.x86_64.rpm

SL 4.x

 SRPMS:
wireshark-1.0.3-3.el4_7.src.rpm
 i386:
wireshark-1.0.3-3.el4_7.i386.rpm
wireshark-gnome-1.0.3-3.el4_7.i386.rpm
 x86_64:
wireshark-1.0.3-3.el4_7.x86_64.rpm
wireshark-gnome-1.0.3-3.el4_7.x86_64.rpm

SL 5.x

 SRPMS:
wireshark-1.0.3-4.el5_2.src.rpm
 i386:
wireshark-1.0.3-4.el5_2.i386.rpm
wireshark-gnome-1.0.3-4.el5_2.i386.rpm
 x86_64:
wireshark-1.0.3-4.el5_2.x86_64.rpm
wireshark-gnome-1.0.3-4.el5_2.x86_64.rpm

-Connie Sieh
-Troy Dawson