Bug 493973 (CVE-2009-1210)
Summary: | CVE-2009-1210 wireshark: format string in PROFINET dissector | ||||||
---|---|---|---|---|---|---|---|
Product: | [Other] Security Response | Reporter: | Tomas Hoger <thoger> | ||||
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||
Status: | CLOSED ERRATA | QA Contact: | |||||
Severity: | medium | Docs Contact: | |||||
Priority: | medium | ||||||
Version: | unspecified | CC: | kreilly, mjc, rvokal | ||||
Target Milestone: | --- | Keywords: | Security | ||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
URL: | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1210 | ||||||
Whiteboard: | |||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2009-06-16 06:39:22 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Bug Depends On: | 501947, 501948, 501949, 501950, 501951, 833991 | ||||||
Bug Blocks: | |||||||
Attachments: |
|
Description
Tomas Hoger
2009-04-03 14:54:47 UTC
Upstream bug report: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3382 Upstream SVN commit, fixing multiple format string flaws across wireshark sources: trunk: http://anonsvn.wireshark.org/viewvc?view=rev&revision=26652 trunk-1.0: http://anonsvn.wireshark.org/viewvc?view=rev&revision=27926 Fix should be included in upstream 1.0.7. Format string demonstrated by the published profinet PoC is caught by fortify source on Red Hat Enterprise Linux 5 and later, reducing impact of the flaw to non-exploitable crash. Created attachment 338058 [details] Reproducer Source: http://www.milw0rm.com/exploits/8308 wireshark-1.0.7-1.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report. wireshark-1.0.8-1.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report. Work-around: Disable affected Profinet dissectors. This can be done via GUI - Analyze -> Enabled Protocols... and disable all Profinet dissectors (PN-*). Alternatively, you can list Profinet dissectors in local (~/.wireshark/disabled_protos) or global (/usr/share/wireshark/disabled_protos) disabled_protos configuration file, read by both GNOME Wireshark GUI and text-only tshark: pn_dcp pn_mrp pn_mrrt pn_ptcp pn_rt Refer to Wireshark documentation regarding further details about configuration file format. This issue has been addressed in following products: Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 4 Via RHSA-2009:1100 https://rhn.redhat.com/errata/RHSA-2009-1100.html |