PT-2011-4405 · Wireshark · Wireshark

Publicado 2011-09-20 · Atualizado 2024-06-15 · CVE-2011-3360

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.8 Wireshark versions 1.6.x through 1.6.1

Description The issue allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory. This is due to an untrusted search path vulnerability.

Recommendations For Wireshark versions 1.4.x through 1.4.8, update to version 1.4.9 or later. For Wireshark versions 1.6.x through 1.6.1, update to version 1.6.2 or later.

Exploit

Correção

Identificadores relacionados

CVE-2011-3360

DSA-2324-1

OPENSUSE-SU-2024:10199-1

Produtos afetados

Wireshark

Referências · 278

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/wireshark_lua.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18125 · Exploit
• https://suse.com/security/cve/CVE-2015-6243 · Nota
• https://suse.com/security/cve/CVE-2014-6428 · Nota
• https://suse.com/security/cve/CVE-2013-3558 · Nota
• https://suse.com/security/cve/CVE-2013-1576 · Nota
• https://suse.com/security/cve/CVE-2011-1140 · Nota
• https://suse.com/security/cve/CVE-2012-4298 · Nota
• https://suse.com/security/cve/CVE-2013-4932 · Nota
• https://suse.com/security/cve/CVE-2011-3266 · Nota
• https://suse.com/security/cve/CVE-2011-1143 · Nota
• https://suse.com/security/cve/CVE-2014-2282 · Nota
• https://suse.com/security/cve/CVE-2014-8710 · Nota
• https://suse.com/security/cve/CVE-2012-4289 · Nota
• https://suse.com/security/cve/CVE-2016-6511 · Nota