Test ID:	1.3.6.1.4.1.25623.1.0.58988
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2007:0709
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2007:0709. Wireshark is a program for monitoring network traffic. Several denial of service bugs were found in Wireshark's HTTP, iSeries, DCP ETSI, SSL, MMS, DHCP and BOOTP protocol dissectors. It was possible for Wireshark to crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3393) Wireshark would interpret certain completion codes incorrectly when dissecting IPMI traffic. Additionally, IPMI 2.0 packets would be reported as malformed IPMI traffic. Users of Wireshark should upgrade to these updated packages containing Wireshark version 0.99.6, which correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0709.html http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html http://www.redhat.com/security/updates/classification/#low Risk factor : High CVSS Score: 7.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3389 BugTraq ID: 24662 http://www.securityfocus.com/bid/24662 http://security.gentoo.org/glsa/glsa-200708-12.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:145 http://osvdb.org/37643 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9964 http://www.redhat.com/support/errata/RHSA-2007-0709.html http://www.redhat.com/support/errata/RHSA-2007-0710.html http://www.redhat.com/support/errata/RHSA-2008-0059.html http://www.securitytracker.com/id?1018315 http://secunia.com/advisories/25833 http://secunia.com/advisories/25987 http://secunia.com/advisories/26004 http://secunia.com/advisories/26499 http://secunia.com/advisories/27592 http://secunia.com/advisories/28583 SuSE Security Announcement: SUSE-SR:2007:015 (Google Search) http://www.novell.com/linux/security/advisories/2007_15_sr.html http://www.vupen.com/english/advisories/2007/2353 XForce ISS Database: wireshark-chunkedhttp-dos(35207) https://exchange.xforce.ibmcloud.com/vulnerabilities/35207 Common Vulnerability Exposure (CVE) ID: CVE-2007-3390 Debian Security Information: DSA-1322 (Google Search) http://www.debian.org/security/2007/dsa-1322 http://osvdb.org/37642 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10865 http://secunia.com/advisories/25877 XForce ISS Database: wireshark-iseries-dos(35205) https://exchange.xforce.ibmcloud.com/vulnerabilities/35205 Common Vulnerability Exposure (CVE) ID: CVE-2007-3391 http://osvdb.org/37641 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11672 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14911 XForce ISS Database: wireshark-dcpetsi-dos(35204) https://exchange.xforce.ibmcloud.com/vulnerabilities/35204 Common Vulnerability Exposure (CVE) ID: CVE-2007-3392 Bugtraq: 20070814 WireShark MMS Remote Denial of Service vulnerability (Google Search) http://www.securityfocus.com/archive/1/476468/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10663 XForce ISS Database: wireshark-sslmms-dos(35203) https://exchange.xforce.ibmcloud.com/vulnerabilities/35203 Common Vulnerability Exposure (CVE) ID: CVE-2007-3393 http://osvdb.org/37639 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11010 http://secunia.com/advisories/22588/ XForce ISS Database: wireshark-dhcpbootp-dos(35113) https://exchange.xforce.ibmcloud.com/vulnerabilities/35113
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.