Soluzioni per la vulnerabilità

La Scansione Vulnerabilità periodica di Nimsoft Cloud Monitor verifica le vulnerabilità riportate qui sotto. Per visualizzare le soluzioni per la vulnerabilità più recenti scansionate da WatchMouse, visitare la pagina sulla panoramica delle Soluzioni per la vulnerabilità

Categoria: SuSE Local Security Checks Fattore di rischio: High Aggiunto il: 18 mar 2010
Synopsis:

The remote SuSE system is missing a security patch for wireshark

Description:

This update of wireshark fixes:



CVE-2009-4376: Remote attackers could potentially trigger a buffer overflow in the Daintree SNA file parser. CVE-2009-4377: Specially crafted packets could cause the SMB and SMB2 dissector to crash wireshark. CVE-2009-2563: Unspecified vulnerability in the Infiniband dissector allows remote attackers to cause a denial of service. CVE-2010-0304: Several buffer overflows in the LWRES dissector.

See also:

https://bugzilla.novell.com/show_bug.cgi?id=565902
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4377
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4376
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0304
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2563

Solution:

Run yast to install the security patch for wireshark

Risk factor:

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)