Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities :

  - crash while loading a Tektronix .rf5 file CVE-2009-1268:
    crash in Check Point High-Availability Protocol (CPHAP)     dissector CVE-2009-1267: LDAP dissector could crash on     Windows CVE-2009-1210: PROFINET format string bug     CVE-2009-1266: additional PROFINET format string bugs, a     crash in the PCNFSD dissector. (CVE-2009-1269)

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities :

  - crash while loading a Tektronix .rf5 file.
    (CVE-2009-1269)

  - crash in Check Point High-Availability Protocol (CPHAP)     dissector. (CVE-2009-1268)

  - LDAP dissector could crash on Windows. (CVE-2009-1267)

  - PROFINET format string bug. (CVE-2009-1210)

  - additional PROFINET format string bugs, a crash in the     PCNFSD dissector. (CVE-2009-1266)

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities:
CVE-2009-1269: crash while loading a Tektronix .rf5 file CVE-2009-1268: crash in Check Point High-Availability Protocol (CPHAP) dissector CVE-2009-1267: LDAP dissector could crash on Windows CVE-2009-1210: PROFINET format string bug CVE-2009-1266: additional PROFINET format string bugs, a crash in the PCNFSD dissector

The remote host is affected by the vulnerability described in GLSA-200906-05 (Wireshark: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Wireshark:
    David Maciejak discovered a vulnerability in packet-usb.c in the USB     dissector via a malformed USB Request Block (URB) (CVE-2008-4680).
    Florent Drouin and David Maciejak reported an unspecified vulnerability     in the Bluetooth RFCOMM dissector (CVE-2008-4681).
    A malformed Tamos CommView capture file (aka .ncf file) with an     'unknown/unexpected packet type' triggers a failed assertion in wtap.c     (CVE-2008-4682).
    An unchecked packet length parameter in the dissect_btacl() function in     packet-bthci_acl.c in the Bluetooth ACL dissector causes an erroneous     tvb_memcpy() call (CVE-2008-4683).
    A vulnerability where packet-frame does not properly handle exceptions     thrown by post dissectors caused by a certain series of packets     (CVE-2008-4684).
    Mike Davies reported a use-after-free vulnerability in the     dissect_q931_cause_ie() function in packet-q931.c in the Q.931     dissector via certain packets that trigger an exception     (CVE-2008-4685).
    The Security Vulnerability Research Team of Bkis reported that the SMTP     dissector could consume excessive amounts of CPU and memory     (CVE-2008-5285).
    The vendor reported that the WLCCP dissector could go into an infinite     loop (CVE-2008-6472).
    babi discovered a buffer overflow in wiretap/netscreen.c via a     malformed NetScreen snoop file (CVE-2009-0599).
    A specially crafted Tektronix K12 text capture file can cause an     application crash (CVE-2009-0600).
    A format string vulnerability via format string specifiers in the HOME     environment variable (CVE-2009-0601).
    THCX Labs reported a format string vulnerability in the     PROFINET/DCP (PN-DCP) dissector via a PN-DCP packet with format string     specifiers in the station name (CVE-2009-1210).
    An unspecified vulnerability with unknown impact and attack vectors     (CVE-2009-1266).
    Marty Adkins and Chris Maynard discovered a parsing error in the     dissector for the Check Point High-Availability Protocol (CPHAP)     (CVE-2009-1268).
    Magnus Homann discovered a parsing error when loading a Tektronix .rf5     file (CVE-2009-1269).
    The vendor reported that the PCNFSD dissector could crash     (CVE-2009-1829).
  Impact :

    A remote attacker could exploit these vulnerabilities by sending     specially crafted packets on a network being monitored by Wireshark or     by enticing a user to read a malformed packet trace file which can     trigger a Denial of Service (application crash or excessive CPU and     memory usage) and possibly allow for the execution of arbitrary code     with the privileges of the user running Wireshark.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
41506	SuSE 10 Security Update : ethereal (ZYPP Patch Number 6269)	Nessus	SuSE Local Security Checks	critical
41460	SuSE 11 Security Update : wireshark (SAT Patch Number 910)	Nessus	SuSE Local Security Checks	critical
41303	SuSE9 Security Update : ethereal (YOU Patch Number 12424)	Nessus	SuSE Local Security Checks	critical
40323	openSUSE Security Update : wireshark (wireshark-912)	Nessus	SuSE Local Security Checks	critical
40154	openSUSE Security Update : wireshark (wireshark-912)	Nessus	SuSE Local Security Checks	critical
39580	GLSA-200906-05 : Wireshark: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
38924	openSUSE 10 Security Update : wireshark (wireshark-6271)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2009-1266

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical