New Search

RHSA-2008:0890 -- wireshark security update (Moderate)

oval:org.mitre.oval:def:29012

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Multiple buffer overflow flaws were found in Wireshark. If Wireshark read a malformed packet off a network it could crash or possibly execute arbitrary code as the user running Wireshark. (CVE-2008-3146)

Family:
unix
Status:
ACCEPTED
Platform(s):
  • Red Hat Enterprise Linux 4
  • CentOS Linux 3
  • Red Hat Enterprise Linux 3
  • Red Hat Enterprise Linux 5
  • CentOS Linux 5
Class:
patch
Reference(s):
  • RHSA-2008:0890
  • CESA-2008:0890-CentOS 3
  • CESA-2008:0890-CentOS 5
  • CVE-2008-1070
  • CVE-2008-1071
  • CVE-2008-1072
  • CVE-2008-1561
  • CVE-2008-1562
  • CVE-2008-1563
  • CVE-2008-3137
  • CVE-2008-3138
  • CVE-2008-3141
  • CVE-2008-3145
  • CVE-2008-3146
  • CVE-2008-3932
  • CVE-2008-3933
  • CVE-2008-3934
Product(s):
  • wireshark