PT-2006-4504 · Wireshark+1 · Wireshark+1

Publicado 2006-07-18 · Atualizado 2018-10-18 · CVE-2006-3631

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.9.10 through 0.99.0

Description The issue is related to an unspecified vulnerability in the SSH dissector, allowing remote attackers to cause a denial of service through an infinite loop. The attack vectors for this issue are unknown.

Recommendations For Wireshark versions 0.9.10 through 0.99.0, update to a version that contains a fix for this issue to prevent potential denial of service attacks.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2006-3631

DSA-1127

RHSA-2006:0602

RHSA-2006_0602

Produtos afetados

Red Hat

Wireshark

Referências · 35

• http://wireshark.org/security/wnpa-sec-2006-01.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3627 · Nota
• https://access.redhat.com/security/cve/CVE-2006-3629 · Nota
• http://secunia.com/advisories/21488 · Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm · Nota
• http://secunia.com/advisories/21121 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3632 · Nota
• http://secunia.com/advisories/21598 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/2850 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3631 · Nota
• http://security.gentoo.org/glsa/glsa-200607-09.xml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27829 · Nota
• https://access.redhat.com/security/cve/CVE-2006-3628 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:128 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3630 · Nota