PT-2008-3120 · Wireshark+1 · Wireshark+1

Publicado 2008-03-31 · Atualizado 2018-10-11 · CVE-2008-1561

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.99.5 through 0.99.8

Description The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, by sending a malformed packet to either the X.509sat or Roofnet dissectors. In the case of the Roofnet dissector, this might also result in the application hanging.

Recommendations For Wireshark versions 0.99.5 through 0.99.8, consider disabling the X.509sat and Roofnet dissectors as a temporary workaround to minimize the risk of denial of service attacks until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2008-1561

RHSA-2008:0890

RHSA-2008_0890

Produtos afetados

Red Hat

Wireshark

Referências · 47

• 🔥 https://exploit-db.com/exploits/31552 · Exploit
• 🔥 http://securityfocus.com/bid/28485 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/wireshark/ldap.rb · Nota
• http://securityfocus.com/bid/30020 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41515 · Nota
• http://securitytracker.com/id?1019728 · Nota
• http://secunia.com/advisories/29971 · Nota
• http://vupen.com/english/advisories/2008/2773 · Nota
• http://vupen.com/english/advisories/2008/1007/references · Nota
• http://securityfocus.com/archive/1/490487/100/0/threaded · Nota
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00140.html · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2008:091 · Aviso do Fabricante
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0138 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1561 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2008-1562 · Nota