Fedora 12 : wireshark-1.2.5-3.fc12 (2009-13592)

This script is Copyright (C) 2009-2015 Tenable Network Security, Inc.


Synopsis :

The remote Fedora host is missing a security update.

Description :

Various fixes were provided in wireshark 1.2.5 - see
http://www.wireshark.org/docs/relnotes/wireshark-1.2.5.html for more
details. Enhancements - introduced -devel package with autoconf
support - enable Lua support Fedora Bug Fixes - the root warning
dialog no longer shows up The following vulnerabilities have been
fixed. See the security advisory for details and a workaround.
http://www.wireshark.org/security/wnpa- sec-2009-09.html - The
Daintree SNA file parser could overflow a buffer. (Bug 4294)
CVE-2009-4376 - The SMB and SMB2 dissectors could crash. (Bug 4301)
CVE-2009-4377 - The IPMI dissector could crash on Windows. (Bug 4319)
The following bugs have been fixed: - Wireshark does not graph rtp
streams. (Bug 3801) - Wireshark showing extraneous data in a TCP
stream. (Bug 3955) - Wrong decoding of gtp.target identification. (Bug
3974) - TTE dissector bug. (Bug 4247) - Upper case in Lua pref symbol
causes Wireshark to crash. (Bug 4255) - OpenBSD 4.5 build fails at
epan/dissectors/packet-rpcap.c. (Bug 4258) - Incorrect display of
stream data using 'Follow tcp stream' option. (Bug 4288) - Custom
RADIUS dictionary can cause a crash. (Bug 4316) Updated Protocol
Support - DAP, eDonkey, GTP, IPMI, MIP, RADIUS, RANAP, SMB, SMB2, TCP,
TTE, VNC, X.509sat Updated Capture File Support - Daintree SNA.

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.

See also :

http://www.wireshark.org/docs/relnotes/wireshark-1.2.5.html
http://www.wireshark.org/security/wnpa-
https://bugzilla.redhat.com/show_bug.cgi?id=549578
http://www.nessus.org/u?776b44cb

Solution :

Update the affected wireshark package.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 6.9
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Family: Fedora Local Security Checks

Nessus Plugin ID: 43592 (fedora_2009-13592.nasl)

Bugtraq ID: 37407

CVE ID: CVE-2009-4376
CVE-2009-4377
CVE-2009-4378

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now