FYI...

Wireshark multiple vulns - update available
- http://secunia.com/advisories/29156/
Release Date: 2008-02-28
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
Software: Wireshark (formerly Ethereal) 0.x
...The vulnerabilities are reported in various versions prior to 0.99.8.
Solution: Update to version 0.99.8.
http://www.wireshark.org/download.html

- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1070
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1071
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1072

FYI...

- http://www.wireshark.org/security/wnpa-sec-2008-02.html
Name: Multiple problems in Wireshark®versions 0.99.2 to 0.99.8
Docid: wnpa-sec-2008-02
Date: March 31, 2008 -?-
Versions affected: 0.99.2 up to and including 0.99.8 ...
Impact:
It may be possible to make Wireshark crash by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
Resolution: Upgrade to Wireshark 1.0.0 or later.
If are running Wireshark 0.99.8 or earlier and cannot upgrade, you can work around each of the problems listed above by doing the following:
* Disable the LDAP, Roofnet, and X.509sat dissectors:
o Select Analyze→Enabled Protocols... from the menu.
o Make sure "LDAP," "Roofnet," and "X509SAT" are un-checked.
o Click "Save", then click "OK"...
- http://www.wireshark.org/download.html
"...current stable release of Wireshark is 0.99.8..." (03.28.2008)

- http://secunia.com/advisories/29569/
Release Date: 2008-03-28
Critical: Moderately critical
Impact: DoS
Where: From -remote-
Solution Status: Unpatched
...The vulnerabilities are reported in various versions prior to 1.0.0.
Solution: Fixed in an -upcoming- version 1.0.0.

FYI...

Wireshark 1.0 released
- http://www.wireshark.org/
Mar 31, 2008 - "...In this release:
Security-related vulnerabilities in the X.509sat, Roofnet, LDAP, and SCCP dissectors have been fixed. See the advisory for details: http://www.wireshark.org/security/wnpa-sec-2008-02.html

Download:
- http://www.wireshark.org/download.html

FYI...

Wireshark multiple vulns - update available
- http://secunia.com/advisories/30886/
Release Date: 2008-07-01
Critical: Moderately critical
Impact: Exposure of sensitive information, DoS
Where: From remote
Solution Status: Vendor Patch
Software: Wireshark (formerly Ethereal) 0.x, Wireshark 1.x
Solution: Update to version 1.0.1...
Original Advisory: http://www.wireshark.org/security/wnpa-sec-2008-03.html

The current stable release of Wireshark is 1.0.1. It supersedes all previous releases...
- http://www.wireshark.org/download.html

FYI...

Wireshark v1.0.2 released
- http://secunia.com/advisories/31044/
Release Date: 2008-07-11
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
...The vulnerability is reported in versions 0.8.19 to 1.0.1.
Solution:
Update to version 1.0.2.
http://www.wireshark.org/download.html

> http://www.wireshark.org/security/wnpa-sec-2008-04.html

//

FYI...

Wireshark v1.0.3 released
- http://secunia.com/advisories/31674/
Release Date: 2008-09-04
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
Software: Wireshark (formerly Ethereal) 0.x, Wireshark 1.x...
Solution: Update to version 1.0.3.
http://www.wireshark.org/download.html

- http://www.wireshark.org/security/wnpa-sec-2008-05.html

- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3146

FYI...

Wireshark multiple vulns - update available
- http://secunia.com/advisories/32355/
Release Date: 2008-10-21
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
...The weakness and the vulnerability affect versions 0.99.7 to 1.0.3.
Solution: Update to version 1.0.4.
http://www.wireshark.org/download.html ...
Original Advisory:
http://www.wireshark.org/security/wnpa-sec-2008-06.html ...

FYI...

Wireshark SMTP Processing DoS vuln - v1.0.4
- http://secunia.com/advisories/32840/
Release Date: 2008-11-24
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Workaround
Software: Wireshark 1.x
...The vulnerability is reported in version 1.0.4. Prior versions may also be affected...
Original Advisory: http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065840.html
...prerelease version of Wireshark 1.0.5 here:
http://www.wireshark.org/download/prerelease/
(See wireshark-setup-1.0.5pre1-26829.exe 23-Nov-2008 10:12 21M)