Software Update: Wireshark 1.0.4

Anyone who goes deeper into maintaining a network or trying to solve communication problems on a network can use a packet sniffer, such as Wireshark. Wireshark is a continuation of the well-known Ethereal and is able to analyze the data sent over the network and distinguish between the different network protocols, so that the network traffic can be monitored as a whole. It is also possible to use previously saved data traffic as input for the program. Wireshark version 1.0.4 has recently been released with the following list of changes:

The following vulnerabilities have been fixed:

see the security advisory for details and a workaround.

• Florent Drouin and David Maciejak found that the Bluetooth ACL dissector could crash or abort. (Bug 1513)
  Versions affected: 0.99.2 to 1.0.3
• The Q.931 dissector could crash or abort. (Bug 2870)
  Versions affected: 0.10.3 to 1.0.3
• Wireshark could abort while reading Tamos CommView capture files. (Bug 2926)
  Versions affected: 0.99.7 to 1.0.3
• David Maciejak found that the USB dissector could crash or abort. This led to the discovery of a similar problem in the Bluetooth RFCOMM dissector. (Bug 2922)
  Versions affected: 0.99.7 to 1.0.3
• Vivek Gupta and David Maciejak found that the PRP and MATE dissectors could make Wireshark crash. (Neither PRP nor MATE are enabled by default.) (Bug 2549)
  Versions affected: 0.99.2 to 1.0.3

The following bugs have been fixed:

• Let MP2T call its subdissectors, even without tree (Bug 2627)
• Wireless Toolbar not enabled (using AirPcap) if PCAP_REMOTE=1 (Bug 2685)
• Failure to dissect long SASL wrapped LDAP response (Bug 2687)
• Fix compiler warnings (Bug 2823)
• Homeplug dissection bugs (Bug 2859)
• Malformed Packet DCP ETSI error (Bug 2860)
• Wrong size of selected_registrar in WPS dissector (Bug 2865)
• Dissector assertion displaying cookies in DTLS frames (Bug 2876)
• Missing field type in documentation (Bug 2889)
• Wireshark -p switch seems to have no effect to PROMISCUOUS mode (Bug 2891)
• Misspelled PPI error vector magnitude filter (Bug 2903)
• Modbus Function 43 Encapsulated Interface Transport decoding (Bug 2917)
• Crash when printing or exporting some protocol data (Bug 2934)
• Crash when selecting “Export Selected Packet Bytes” (Bug 2964)

Updated Protocol Support:

AFP, Bluetooth ACL, Bluetooth RFCOMM, DCP ETSI, DTLS, Homeplug, IEEE 802.11, IP, Modbus TCP, MP2T, NSIP, NCP, PPI, Q.931, SASL, SNMP, USB, WPS

New and Updated Capture File Support:

AiroPeek, CommView