Wireshark 1.0.2存在多个安全漏洞

BUGTRAQ ID: 31009
CNCAN ID：CNCAN-2008090507

Wireshark是一款功能强大的协议分析程序。
Wireshark存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。
-NCP解析器存在多个缓冲区溢出和无线循环问题，影响0.9.7到1.0.2版本。
-当解压ZLIB压缩的报文数据时可导致应用程序崩溃，影响0.10.14到1.0.2版本。
-读取Tektronix .rf5文件时可导致应用程序崩溃，影响 0.99.6到1.0.2版本。

Wireshark Wireshark 1.0.2
Wireshark Wireshark 1.0.1
Wireshark Wireshark 1.0
Wireshark Wireshark 0.99.8
Wireshark Wireshark 0.99.7
Wireshark Wireshark 0.99.6
Wireshark Wireshark 0.99.5
Wireshark Wireshark 0.99.4
Wireshark Wireshark 0.99.3
Wireshark Wireshark 0.99.2
Wireshark Wireshark 0.99.1
Wireshark Wireshark 0.99
Wireshark Wireshark 0.10.13
Wireshark Wireshark 0.10.4
Wireshark Wireshark 0.10
Wireshark Wireshark 0.9.10
Ethereal Group Ethereal 0.10.14
Ethereal Group Ethereal 0.10.13
Ethereal Group Ethereal 0.10.12
Ethereal Group Ethereal 0.10.11
Ethereal Group Ethereal 0.10.10
Ethereal Group Ethereal 0.10.9

• Gentoo Linux
  Ethereal Group Ethereal 0.10.8
  Ethereal Group Ethereal 0.10.7
  Ethereal Group Ethereal 0.10.6
• MandrakeSoft Linux Mandrake 10.1 x86_64
• MandrakeSoft Linux Mandrake 10.1
  Ethereal Group Ethereal 0.10.5
  Ethereal Group Ethereal 0.10.4
  Ethereal Group Ethereal 0.10.3
• MandrakeSoft Linux Mandrake 10.0 AMD64
• MandrakeSoft Linux Mandrake 10.0
• RedHat Fedora Core2
• RedHat Fedora Core1
• S.u.S.E. Linux Personal 9.2
• S.u.S.E. Linux Personal 9.1
• S.u.S.E. Linux Personal 9.0
  Ethereal Group Ethereal 0.10.2
  Ethereal Group Ethereal 0.10.1
  Ethereal Group Ethereal 0.10
  Ethereal Group Ethereal 0.9.16
• MandrakeSoft Linux Mandrake 9.2 amd64
• MandrakeSoft Linux Mandrake 9.2
  Ethereal Group Ethereal 0.9.15
  Ethereal Group Ethereal 0.9.14
  Ethereal Group Ethereal 0.9.13
• MandrakeSoft Linux Mandrake 9.1 ppc
• MandrakeSoft Linux Mandrake 9.1
• RedHat Fedora Core1
  Ethereal Group Ethereal 0.9.12
  Ethereal Group Ethereal 0.9.11
  Ethereal Group Ethereal 0.9.10
• Conectiva Linux 9.0
  Ethereal Group Ethereal 0.9.9
• MandrakeSoft Linux Mandrake 9.1 ppc
• MandrakeSoft Linux Mandrake 9.1
  Ethereal Group Ethereal 0.9.8
• RedHat Linux 9.0 i386
• RedHat Linux 8.0 i386
• RedHat Linux 8.0
• RedHat Linux 7.3 i386
• RedHat Linux 7.3
• RedHat Linux 7.2 ia64
• RedHat Linux 7.2 i386
• RedHat Linux 7.2
• Terra Soft Solutions Yellow Dog Linux 3.0
  Ethereal Group Ethereal 0.9.7

升级到最新版本：
Wireshark Wireshark 0.10
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.1
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.10
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.11
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.12
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.10.13
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.13
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.14
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.2
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.3
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.10.4
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.4
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.5
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.6
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.7
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.8
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.10.9
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.10
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.9.10
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.11
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.12
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.13
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.14
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.15
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.16
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.7
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.8
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Ethereal Group Ethereal 0.9.9
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99.1
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99.2
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99.3
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99.4
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99.5
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99.6
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99.7
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 0.99.8
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 1.0
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 1.0.1
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>
Wireshark Wireshark 1.0.2
Wireshark wireshark-1.0.3.tar.gz
<a href=“http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz” target=“_blank”>http://www.wireshark.org/download/src/wireshark-1.0.3.tar.gz</a>