PT-2008-3120 · Wireshark+1 · Wireshark+1

Published 2008-03-31 · Updated 2018-10-11 · CVE-2008-1561

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.99.5 through 0.99.8

Description The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, by sending a malformed packet to either the X.509sat or Roofnet dissectors. In the case of the Roofnet dissector, this might also result in the application hanging.

Recommendations For Wireshark versions 0.99.5 through 0.99.8, consider disabling the X.509sat and Roofnet dissectors as a temporary workaround to minimize the risk of denial of service attacks until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2008-1561

RHSA-2008:0890

RHSA-2008_0890

Affected Products

Red Hat

Wireshark

References · 47

• 🔥 https://exploit-db.com/exploits/31552 · Exploit
• 🔥 http://securityfocus.com/bid/28485 · Exploit
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00140.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:091 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1561 · Security Note
• http://redhat.com/support/errata/RHSA-2008-0890.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-1561 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00228.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-1561 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200805-05.xml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-1561 · Vendor Advisory
• http://secunia.com/advisories/29569 · Vendor Advisory
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/wireshark/ldap.rb · Note
• http://securityfocus.com/bid/30020 · Note