Debian DSA-1322-1 : wireshark - several vulnerabilities

medium Nessus Plugin ID 25616

Synopsis

The remote Debian host is missing a security-related update.

Description

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems :

- CVE-2007-3390 Off-by-one overflows were discovered in the iSeries dissector.

- CVE-2007-3392 The MMS and SSL dissectors could be forced into an infinite loop.

- CVE-2007-3393 An off-by-one overflow was discovered in the DHCP/BOOTP dissector.

The oldstable distribution (sarge) is not affected by these problems.
(In Sarge Wireshark used to be called Ethereal).

Solution

Upgrade the Wireshark packages.

For the stable distribution (etch) these problems have been fixed in version 0.99.4-5.etch.0. Packages for the big endian MIPS architecture are not yet available. They will be provided later.

Plugin Details

Severity: Medium

ID: 25616

File Name: debian_DSA-1322.nasl

Version: 1.22

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 6/29/2007

Updated: 1/4/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:wireshark, cpe:/o:debian:debian_linux:4.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 6/27/2007

Reference Information

CVE: CVE-2007-3390, CVE-2007-3392, CVE-2007-3393

DSA: 1322

Detections

Analytics