Re: [Wireshark-dev] [ANNOUNCE] WinPcap 4.0.2 has been released

["Gianluca Varenni" <gianluca.varenni () gmail com>]

I can tell you from the very beginning that this release doesn't address any 
specific Vista issue. Apart from a minor change in the the user level code, 
all the fixes are in the driver, and a bug there causes a BSOD.

I'd like to understand what's going on with Vista+nmap and hopefully address 
it in the next WinPcap 4.1 beta, so any help from the nmap developers is 
appreciated :-)

Have a nice day
GV


----- Original Message ----- 
From: "DePriest, Jason R." <jrdepriest () gmail com>
To: "Nmap Dev" <nmap-dev () insecure org>
Sent: Friday, November 09, 2007 11:10 AM
Subject: Fwd: [Wireshark-dev] [ANNOUNCE] WinPcap 4.0.2 has been released


> Folks might want to see if this helps with any of the strange Vista 
> issues.
>
> -Jason
>
> ---------- Forwarded message ----------
> From: Gianluca Varenni
> Date: Nov 9, 2007 11:47 AM
> Subject: [Wireshark-dev] [ANNOUNCE] WinPcap 4.0.2 has been released
> To: Developer support list for Wireshark
>
>
> As of today, WinPcap 4.0.2 is available in the download section of the
> WinPcap website, http://www.winpcap.org/install/ .
>
> This maintenance release addresses a security vulnerability reported
> by the iDefense Labs in a soon-to-be-released advisory.
> Full details can be found in the change log attached at the end of
> this message.
>
> Gianluca Varenni
> WinPcap Team
>
>
>
> Changelog from WinPcap 4.0.1
> ============================
>
> - Disabled support for monitor mode (also called TME, Table Management
>  Extensions) in the driver. This module suffers from several security
>  vulnerabilities that could result in BSODs or privilege escalation
>  attacks. This fix addresses a security vulnerability reported by the
>  iDefense Labs.
>
> - Bug fixing:
>  * Added a missing NULL pointer check in pcap_open()
>  * Fixed a misplaced #ifdef WIN32 directive in pcap_open().
>  * Fixed a bug in the send routine of the driver that could cause a
>    crash under low resources conditions.
>  * Fixed a bug in the installer causing a mis-detection of a previous
>    WinPcap installation
>  * Minor cleanup of some #define directives in the driver (to disable
>    the TME extensions).
>
> =========
>
>
>
>
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev () wireshark org
> http://www.wireshark.org/mailman/listinfo/wireshark-dev
>
>
>
>
> -- 
> NOTICE:  This email is being sent in clear-text across the public
> Internet.  Therefore, any attempts to include unenforceable legalese
> restrictions are ridiculous and pointless.  If you can read this,
> consider yourself authorized (whether I like it or not).


--------------------------------------------------------------------------------


> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org 


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org