Bug 19778

Summary:	Multiple vulnerabilities: CVE-2009-1210, CVE-2009-1268, CVE-2009-1269
Product:	Sisyphus	Reporter:	Vladimir Lettiev <crux>
Component:	wireshark-base	Assignee:	Anton Farygin <rider>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	blocker
Priority:	P3	CC:	ab, ldv, rider
Version:	unstable	Keywords:	security
Hardware:	all
OS:	Linux
URL:	http://www.wireshark.org/security/wnpa-sec-2009-02.html

Description

Vladimir Lettiev 2009-04-26 21:14:06 MSD

Обнаружены несколько уязвимостей в wireshark:

CVE-2009-1210 - The PROFINET dissector was vulnerable to a format string overflow. 
CVE-2009-1268 - The Check Point High-Availability Protocol (CPHAP) dissector could crash.
CVE-2009-1269 - Wireshark could crash while loading a Tektronix .rf5 file.

Upstream выпустил исправление в виде новой версии 1.0.7

Comment 1

Vladimir Lettiev 2009-04-26 21:16:06 MSD

reassign

Comment 2

Alexander Bokovoy 2009-04-26 21:23:43 MSD

Раорн, соберешь?

Comment 3

Sir Raorn 2009-04-26 21:53:37 MSD

Мотороллер не мой.

$ git.alt acl sisyphus wireshark show                     
wireshark       ab

Comment 4

Alexander Bokovoy 2009-04-26 23:35:48 MSD

task #5481

Comment 5

Vladimir Lettiev 2009-04-28 19:46:08 MSD

прошло в sisyphus

Comment 6

Vladimir Lettiev 2009-04-28 19:47:04 MSD

closed

Comment 7

Alexander Bokovoy 2009-04-29 08:41:02 MSD

Прошу помощи с 4.0 и 4.1 -- до пятницы 1 мая не будет свободного времени.