topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Saturday December 14, 2024, 3:05 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: UrlSnooper & WinPcap 4.01beta  (Read 6420 times)

TeaTime

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 13
  • A smilling laugh!
    • View Profile
    • Read more about this member.
    • Donate to Member
UrlSnooper & WinPcap 4.01beta
« on: November 13, 2007, 10:47 AM »
Hello!

I guess developers of UrlSnooper are aware of the following information but, if not, here it is :

WinPcap's version installed with UrlSnooper 2.20.01 is version 4.01beta. It appears that WinPcap v.4.01 has a security issue. I don't know if this issue includes v.4.01beta, but whatever, here are the links :

1- Security flaw concerning WinPcap v.4.01 : http://www.heise-sec...ity.co.uk/news/98879
2- Availability of WinPcap v.4.02 : http://www.winpcap.o.../install/default.htm

Bye for now :)

The sun is always rising somewhere!

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,914
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: UrlSnooper & WinPcap 4.01beta
« Reply #1 on: November 13, 2007, 11:15 AM »
Thanks for the tip, I will upgrade url snooper to use the newly release 4.02.

I'll post the text about the security issue -- it seems its pretty minor, it related to the ability of *local* users on your pc which might not have administrative accounts being able to perform administrative actions:

In a security advisory, security service provider iDefense has warned of a vulnerability in a device driver within the open source WinPcap library that local users could exploit to escalate their privileges.

Regardless, I have something else to upgrade with url snooper anyway so expect a new version in the next couple of days.