Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Nmap Development: [ANNOUNCE] WinPcap 4.0.2 has been released

[ANNOUNCE] WinPcap 4.0.2 has been released

From: Gianluca Varenni <gianluca.varenni_at_cacetech.com>
Date: Fri, 9 Nov 2007 09:49:13 -0800

As of today, WinPcap 4.0.2 is available in the download section of the
WinPcap website, http://www.winpcap.org/install/ .
 
This maintenance release addresses a security vulnerability reported
by the iDefense Labs in a soon-to-be-released advisory.
Full details can be found in the change log attached at the end of
this message.

Gianluca Varenni
WinPcap Team

Changelog from WinPcap 4.0.1
============================

- Disabled support for monitor mode (also called TME, Table Management
  Extensions) in the driver. This module suffers from several security
  vulnerabilities that could result in BSODs or privilege escalation
  attacks. This fix addresses a security vulnerability reported by the
  iDefense Labs.
  
- Bug fixing:
  * Added a missing NULL pointer check in pcap_open()
  * Fixed a misplaced #ifdef WIN32 directive in pcap_open().
  * Fixed a bug in the send routine of the driver that could cause a
    crash under low resources conditions.
  * Fixed a bug in the installer causing a mis-detection of a previous
    WinPcap installation
  * Minor cleanup of some #define directives in the driver (to disable
    the TME extensions).

=========

  

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org

  • application/x-pkcs7-signature attachment: smime_p7s
Received on Nov 09 2007
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]