packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0066 advisory.

    [0.99.5-EL4.1.0.1]
     - Add patch oracle-ocfs2-network.patch

     [0.99.5-1]
     - multiple security issues fixed (#225689)
     - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
     - CVE-2007-0459 - The HTTP dissector could crash.
     - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
     - CVE-2007-0456 - On some systems, the LLT dissector could crash.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Wireshark 0.99.5 fixes four vulnerabilities :

  - CVE-2007-0459 The TCP dissector could hang or crash

  - CVE-2007-0458 The HTTP dissector could crash

  - CVE-2007-0457 The IEEE 802.11 dissector could crash

  - CVE-2007-0456 The LLT dissector could crash

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal.

This update has been rated as having low security impact by the Red Hat Security Response Team.

Wireshark is a program for monitoring network traffic.

Several denial of service bugs were found in Wireshark's LLT, IEEE 802.11, http, and tcp protocol dissectors. It was possible for Wireshark to crash or stop responding if it read a malformed packet off the network. (CVE-2007-0456, CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)

Users of Wireshark should upgrade to these updated packages containing Wireshark version 0.99.5, which is not vulnerable to these issues.

Vulnerabilities in the LLT, IEEE 802.11, HTTP, and TCP dissectors were discovered in versions of wireshark less than 0.99.5, as well as various other bugs.

This updated provides wireshark 0.99.5 which is not vulnerable to these issues.

- multiple security issues fixed (#227140)

    - CVE-2007-0459 - The TCP dissector could hang or crash       while reassembling HTTP packets

  - CVE-2007-0459 - The HTTP dissector could crash.

    - CVE-2007-0457 - On some systems, the IEEE 802.11       dissector could crash.

  - CVE-2007-0456 - On some systems, the LLT dissector could     crash.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
67449	Oracle Linux 5 : Low: / wireshark (ELSA-2007-0066)	Nessus	Oracle Linux Local Security Checks	high
27477	openSUSE 10 Security Update : wireshark (wireshark-2638)	Nessus	SuSE Local Security Checks	medium
24833	RHEL 2.1 / 3 / 4 / 5 : wireshark (RHSA-2007:0066)	Nessus	Red Hat Local Security Checks	medium
24818	CentOS 3 / 4 : wireshark (CESA-2007:0066)	Nessus	CentOS Local Security Checks	medium
24646	Mandrake Linux Security Advisory : wireshark (MDKSA-2007:033)	Nessus	Mandriva Local Security Checks	medium
24303	Fedora Core 5 : wireshark-0.99.5-1.fc5 (2007-207)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2007-0459

high

Tenable Plugins

high

medium

medium

medium

medium

medium