| Beschreibung: |
The remote host is missing an update to wireshark
announced via advisory MDVSA-2008:001-1.
A number of vulnerabilities in the Wireshark program were found that
could cause crashes, excessive looping, or arbitrary code execution.
This update provides Wireshark 0.99.7 which is not vulnerable to
these issues.
An updated version of libsmi is also being provided, not because
of security issues, but because this version of wireshark uses it
instead of net-snmp for SNMP support.
Update:
This update is being reissued without libcap (kernel capabilities)
support, as that is not required by the original released packages,
and thus gave trouble for a number of users.
Affected: 2007.0, 2007.1, 2008.0, Corporate 4.0
Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:001-1
http://www.wireshark.org/security/wnpa-sec-2007-03.html
http://qa.mandriva.com/show_bug.cgi?id=36470
Risk factor : Critical |
