This script is Copyright (C) 2009-2013 Tenable Network Security, Inc.
The remote host has an application that is affected by multiple
The installed version of Wireshark or Ethereal is potentially
affected by multiple vulnerabilities :
- The Daintree SNA file parser can overflow a buffer.
- The SMB and SMB2 dissectors can crash. (Bug 4301)
- The IPMI dissector can crash on Windows. (Bug 4319)
These vulnerabilities can result in a denial of service, or possibly
arbitrary code execution. A remote attacker can exploit these issues
by tricking a user into opening a maliciously crafted capture file.
Additionally, if Wireshark is running in promiscuous mode, one of
these issues can be exploited remotely (from the same network
See also :
Upgrade to Wireshark version 1.2.5 or later.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 6.9
Public Exploit Available : false