Oval Definition:	oval:com.redhat.rhsa:def:20080890
Revision Date: 2008-10-01 Version: 635 Title: RHSA-2008:0890: wireshark security update (Moderate) Description: Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Multiple buffer overflow flaws were found in Wireshark. If Wireshark read a malformed packet off a network, it could crash or, possibly, execute arbitrary code as the user running Wireshark. (CVE-2008-3146) Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malformed dump file. (CVE-2008-1070, CVE-2008-1071, CVE-2008-1072, CVE-2008-1561, CVE-2008-1562, CVE-2008-1563, CVE-2008-3137, CVE-2008-3138, CVE-2008-3141, CVE-2008-3145, CVE-2008-3932, CVE-2008-3933, CVE-2008-3934) Additionally, this update changes the default Pluggable Authentication Modules (PAM) configuration to always prompt for the root password before each start of Wireshark. This avoids unintentionally running Wireshark with root privileges. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 1.0.3, and resolve these issues. Family: unix Class: patch Status: Reference(s): CVE-2008-1070 CVE-2008-1071 CVE-2008-1072 CVE-2008-1561 CVE-2008-1562 CVE-2008-1563 CVE-2008-3137 CVE-2008-3138 CVE-2008-3141 CVE-2008-3145 CVE-2008-3146 CVE-2008-3932 CVE-2008-3933 CVE-2008-3934 RHSA-2008:0890 RHSA-2008:0890-01 RHSA-2008:0890-01 Platform(s): Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 3 is installed AND wireshark is earlier than 0:1.0.3-EL3.3 AND wireshark is signed with Red Hat master key wireshark-gnome is earlier than 0:1.0.3-EL3.3 AND wireshark-gnome is signed with Red Hat master key OR Package Information Red Hat Enterprise Linux 4 is installed AND wireshark-gnome is earlier than 0:1.0.3-3.el4_7 AND wireshark-gnome is signed with Red Hat master key wireshark is earlier than 0:1.0.3-3.el4_7 AND wireshark is signed with Red Hat master key OR Package Information Red Hat Enterprise Linux 5 is installed AND wireshark is earlier than 0:1.0.3-4.el5_2 AND wireshark is signed with Red Hat redhatrelease key wireshark-gnome is earlier than 0:1.0.3-4.el5_2 AND wireshark-gnome is signed with Red Hat redhatrelease key Definition Synopsis Release Information Red Hat Enterprise Linux 3 is installed AND wireshark is earlier than 0:1.0.3-EL3.3 AND wireshark is signed with Red Hat master key wireshark-gnome is earlier than 0:1.0.3-EL3.3 AND wireshark-gnome is signed with Red Hat master key OR Package Information Red Hat Enterprise Linux 4 is installed AND wireshark is earlier than 0:1.0.3-3.el4_7 AND wireshark is signed with Red Hat master key wireshark-gnome is earlier than 0:1.0.3-3.el4_7 AND wireshark-gnome is signed with Red Hat master key OR Package Information Red Hat Enterprise Linux 5 is installed AND wireshark is earlier than 0:1.0.3-4.el5_2 AND wireshark is signed with Red Hat redhatrelease key wireshark-gnome is earlier than 0:1.0.3-4.el5_2 AND wireshark-gnome is signed with Red Hat redhatrelease key Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 4 is installed AND wireshark is earlier than 0:1.0.3-3.el4_7 AND wireshark is signed with Red Hat redhatrelease2 key wireshark-gnome is earlier than 0:1.0.3-3.el4_7 AND wireshark-gnome is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 5 is installed AND wireshark is earlier than 0:1.0.3-4.el5_2 AND wireshark is signed with Red Hat redhatrelease2 key wireshark-gnome is earlier than 0:1.0.3-4.el5_2 AND wireshark-gnome is signed with Red Hat redhatrelease2 key
BACK