ARTICLE WireShark v1.2.6 released

Thursday 28 January 2010 - 501 read - ( Keywords : Data Sniffer , WireShark - Ethereal )

Wireshark is the world’s most popular network protocol analyzer. It has a rich and powerful feature set and runs on most computing platforms including Windows, OS X, Linux, and UNIX. Network professionals, security experts, developers, and educators around the world use it regularly. It is freely available as open source, and is released under the GNU General Public License version 2

Wireshark 1.2.6 (stable) has been released. Installers for Windows, Mac OS X 10.5.5 and above (Intel and PPC), and source code is now available. This release fixes a vulnerability in the LWRES dissector. See the advisory below for details.

JPG - 27 kb

Name:LWRES vulnerability in Wireshark® version 0.9.0 to 1.2.5

Docid: wnpa-sec-2010-02

Date: January 27, 2010

Versions affected: 0.9.0 up to and including 1.2.5 Details

Description

Wireshark 1.2.6 fixes the following vulnerabilities:

- Babi discovered several buffer overflows in the LWRES dissector. Versions affected: 0.9.15 to 1.0.10, 1.2.0 to 1.2.5

Impact

It may be possible to make Wireshark crash remotely or by convincing someone to read a malformed packet trace file.

Resolution

Upgrade to Wireshark 1.2.6 or later.

If are running Wireshark 1.2.5 or earlier (including Ethereal) and cannot upgrade, you can work around each of the problems listed above by doing the following:

- Disable the LWRES dissector:

  • Select Analyze→Enabled Protocols... from the menu.
  • Make sure "LWRES" is un-checked.
  • Click "Save", then click "OK".

POSTSCRIPTUM

Download Wireshark v1.2.6


RELATED ARTICLES

Data Sniffer, WireShark - Ethereal,

7 May 2010 : WireShark 1.2.8 released
1 April 2010 : WireShark 1.2.7 released
28 January 2010 : WireShark v1.2.6 released
18 December 2009 : Wireshark v1.2.5 released
28 October 2009 : Wireshark v1.2.3, v1.0.10, and v1.3.1 Released