PT-2011-4405 · Wireshark · Wireshark

Published 2011-09-20 · Updated 2024-06-15 · CVE-2011-3360

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.8 Wireshark versions 1.6.x through 1.6.1

Description The issue allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory. This is due to an untrusted search path vulnerability.

Recommendations For Wireshark versions 1.4.x through 1.4.8, update to version 1.4.9 or later. For Wireshark versions 1.6.x through 1.6.1, update to version 1.6.2 or later.

Exploit

Fix

Related Identifiers

CVE-2011-3360

DSA-2324-1

OPENSUSE-SU-2024:10199-1

Affected Products

Wireshark

References · 278

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/wireshark_lua.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18125 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3360 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3360 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2011:138 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-3360 · Vendor Advisory
• http://wireshark.org/security/wnpa-sec-2011-15.html · Vendor Advisory
• http://debian.org/security/2011/dsa-2324 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-3360 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10199-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2015-6243 · Note
• https://suse.com/security/cve/CVE-2014-6428 · Note
• https://suse.com/security/cve/CVE-2013-3558 · Note
• https://suse.com/security/cve/CVE-2013-1576 · Note
• https://suse.com/security/cve/CVE-2011-1140 · Note