PT-2006-4501 · Wireshark+1 · Wireshark+1

Publicado 2006-07-18 · Atualizado 2018-10-18 · CVE-2006-3628

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.10.x through 0.99.0

Description The issue concerns multiple format string vulnerabilities that could allow remote attackers to cause a denial of service and possibly execute arbitrary code. This is achieved through various dissectors, including (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP.

Recommendations For Wireshark versions 0.10.x through 0.99.0, update to a version that contains a fix for this issue to prevent potential exploitation.

Correção

DoS

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2006-3628

DSA-1127

RHSA-2006:0602

RHSA-2006_0602

Produtos afetados

Red Hat

Wireshark

Referências · 43

• https://access.redhat.com/security/cve/CVE-2006-3627 · Nota
• http://secunia.com/advisories/21488 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27825 · Nota
• https://access.redhat.com/security/cve/CVE-2006-3629 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm · Nota
• http://secunia.com/advisories/21121 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3632 · Nota
• http://secunia.com/advisories/21598 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/2850 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3631 · Nota
• https://issues.rpath.com/browse/RPL-512 · Nota
• http://osvdb.org/27364 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-3628 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200607-09.xml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9175 · Nota