Test Kennung:	1.3.6.1.4.1.25623.1.0.62907
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2006:0726
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2006:0726. Wireshark is a program for monitoring network traffic. Several flaws were found in Wireshark's HTTP, WBXML, LDAP, and XOT protocol dissectors. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2006-4805, CVE-2006-5468, CVE-2006-5469, CVE-2006-5740) A single NULL byte heap based buffer overflow was found in Wireshark's MIME Multipart dissector. Wireshark could crash or possibly execute arbitrary arbitrary code as the user running Wireshark. (CVE-2006-4574) Users of Wireshark should upgrade to these updated packages containing Wireshark version 0.99.4, which is not vulnerable to these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2006-0726.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : Medium CVSS Score: 5.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4574 BugTraq ID: 20762 http://www.securityfocus.com/bid/20762 Bugtraq: 20061101 rPSA-2006-0202-1 tshark wireshark (Google Search) http://www.securityfocus.com/archive/1/450307/100/0/threaded Debian Security Information: DSA-1201 (Google Search) http://www.us.debian.org/security/2006/dsa-1201 http://www.mandriva.com/security/advisories?name=MDKSA-2006:195 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9740 http://www.redhat.com/support/errata/RHSA-2006-0726.html http://securitytracker.com/id?1017129 http://secunia.com/advisories/22590 http://secunia.com/advisories/22659 http://secunia.com/advisories/22672 http://secunia.com/advisories/22692 http://secunia.com/advisories/22797 http://secunia.com/advisories/22841 http://secunia.com/advisories/22929 http://secunia.com/advisories/23096 SGI Security Advisory: 20061101-01-P ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P SuSE Security Announcement: SUSE-SA:2006:065 (Google Search) http://www.novell.com/linux/security/advisories/2006_65_ethereal.html http://www.vupen.com/english/advisories/2006/4220 XForce ISS Database: wireshark-mime-dos(29844) https://exchange.xforce.ibmcloud.com/vulnerabilities/29844 Common Vulnerability Exposure (CVE) ID: CVE-2006-4805 CERT/CC vulnerability note: VU#723736 http://www.kb.cert.org/vuls/id/723736 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10199 XForce ISS Database: wireshark-xot-dos(29843) https://exchange.xforce.ibmcloud.com/vulnerabilities/29843 Common Vulnerability Exposure (CVE) ID: CVE-2006-5468 CERT/CC vulnerability note: VU#363992 http://www.kb.cert.org/vuls/id/363992 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10707 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14120 XForce ISS Database: wireshark-http-dos(29840) https://exchange.xforce.ibmcloud.com/vulnerabilities/29840 Common Vulnerability Exposure (CVE) ID: CVE-2006-5469 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9537 XForce ISS Database: wireshark-wbxml-dos(29842) https://exchange.xforce.ibmcloud.com/vulnerabilities/29842 Common Vulnerability Exposure (CVE) ID: CVE-2006-5740 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14679 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9482 http://securitytracker.com/alerts/2006/Oct/1017129.html XForce ISS Database: wireshark-ldap-dos(29841) https://exchange.xforce.ibmcloud.com/vulnerabilities/29841
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.