Just a quick note to alert our readers that an new version of the popular network protocol analyzer/sniffer Wireshark (v0.99.8) has been released.  This release includes some security fixes in the SCTP, SNMP, and TFTP dissectors.  Malformed packets can crash the application.  We'll update the story with CVE entries when they become available.

References:

http://www.wireshark.org/security/wnpa-sec-2008-01.html

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1070

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1071

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1072