Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2012.0090
wireshark security update
30 January 2012
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: wireshark
Publisher: Debian
Operating System: Debian GNU/Linux 6
Impact/Access: Execute Arbitrary Code/Commands -- Remote with User Interaction
Denial of Service -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2012-0068 CVE-2012-0067 CVE-2012-0066
CVE-2012-0042 CVE-2012-0041 CVE-2011-3483
Reference: ASB-2012.0005.2
ASB-2011.0082
Original Bulletin:
http://www.debian.org/security/2012/dsa-2395
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - -------------------------------------------------------------------------
Debian Security Advisory DSA-2395-1 security@debian.org
http://www.debian.org/security/ Moritz Muehlenhoff
January 27, 2012 http://www.debian.org/security/faq
- - -------------------------------------------------------------------------
Package : wireshark
Vulnerability : buffer underflow
Problem type : remote
Debian-specific: no
CVE ID : CVE-2011-3483 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066
CVE-2012-0067 CVE-2012-0068
Laurent Butti discovered a buffer underflow in the LANalyzer dissector
of the Wireshark network traffic analyzer, which could lead to the
execution of arbitrary code (CVE-2012-0068)
This update also addresses several bugs, which can lead to crashes of
Wireshark. These are not treated as security issues, but are fixed
nonetheless if security updates are scheduled: CVE-2011-3483,
CVE-2012-0041, CVE-2012-0042, CVE-2012-0066 and CVE-2012-0067.
For the stable distribution (squeeze), this problem has been fixed in
version 1.2.11-6+squeeze6.
For the unstable distribution (sid), this problem has been fixed in
version 1.6.5-1.
We recommend that you upgrade your wireshark packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk8i6FwACgkQXm3vHE4uylrDkQCg5khLjhIkYAbItri576Q4ufHt
BFwAnjQINWnTLRDCg3CLlZOX6ke/Wn3T
=o4sR
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=CBBv
-----END PGP SIGNATURE-----