FreeBSD : wireshark -- multiple vulnerabilities (f6f19735-9245-4918-8a60-87948ebb4907)

medium Nessus Plugin ID 35990

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

Vendor reports :

On non-Windows systems Wireshark could crash if the HOME environment variable contained sprintf-style string formatting characters.
Wireshark could crash while reading a malformed NetScreen snoop file.
Wireshark could crash while reading a Tektronix K12 text capture file.

Solution

Update the affected packages.

See Also

https://www.wireshark.org/security/wnpa-sec-2009-01.html

http://www.nessus.org/u?10d285bd

Plugin Details

Severity: Medium

ID: 35990

File Name: freebsd_pkg_f6f19735924549188a6087948ebb4907.nasl

Version: 1.16

Type: local

Published: 3/23/2009

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:ethereal, p-cpe:/a:freebsd:freebsd:ethereal-lite, p-cpe:/a:freebsd:freebsd:tethereal, p-cpe:/a:freebsd:freebsd:tethereal-lite, p-cpe:/a:freebsd:freebsd:wireshark, p-cpe:/a:freebsd:freebsd:wireshark-lite, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 3/22/2009

Vulnerability Publication Date: 2/6/2009

Reference Information

CVE: CVE-2009-0599, CVE-2009-0600, CVE-2009-0601

CWE: 119, 134, 20