Sign-up

ID

VAR-200902-0885


CVE

CVE-2009-0601


TITLE

Wireshark Format string vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2009-001408

DESCRIPTION

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable. Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to crash the application, denying service to legitimate users. Attackers may be able to leverage some of these vulnerabilities to execute arbitrary code, but this has not been confirmed. These issues affect Wireshark 0.99.6 through 1.0.5. If the user is tricked into grabbing malicious packets from the network or opening a malicious packet capture file, it may cause Wireshark to crash. This fixes some vulnerabilities, which can be exploited by malicious people to potentially compromise a user's system. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200906-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Wireshark: Multiple vulnerabilities Date: June 30, 2009 Bugs: #242996, #248425, #258013, #264571, #271062 ID: 200906-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in Wireshark which allow for Denial of Service (application crash) or remote code execution. Background ========== Wireshark is a versatile network protocol analyzer. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-analyzer/wireshark < 1.0.8 >= 1.0.8 Description =========== Multiple vulnerabilities have been discovered in Wireshark: * David Maciejak discovered a vulnerability in packet-usb.c in the USB dissector via a malformed USB Request Block (URB) (CVE-2008-4680). * Florent Drouin and David Maciejak reported an unspecified vulnerability in the Bluetooth RFCOMM dissector (CVE-2008-4681). * A malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" triggers a failed assertion in wtap.c (CVE-2008-4682). * An unchecked packet length parameter in the dissect_btacl() function in packet-bthci_acl.c in the Bluetooth ACL dissector causes an erroneous tvb_memcpy() call (CVE-2008-4683). * A vulnerability where packet-frame does not properly handle exceptions thrown by post dissectors caused by a certain series of packets (CVE-2008-4684). * Mike Davies reported a use-after-free vulnerability in the dissect_q931_cause_ie() function in packet-q931.c in the Q.931 dissector via certain packets that trigger an exception (CVE-2008-4685). * The Security Vulnerability Research Team of Bkis reported that the SMTP dissector could consume excessive amounts of CPU and memory (CVE-2008-5285). * The vendor reported that the WLCCP dissector could go into an infinite loop (CVE-2008-6472). * babi discovered a buffer overflow in wiretap/netscreen.c via a malformed NetScreen snoop file (CVE-2009-0599). * A specially crafted Tektronix K12 text capture file can cause an application crash (CVE-2009-0600). * An unspecified vulnerability with unknown impact and attack vectors (CVE-2009-1266). * Marty Adkins and Chris Maynard discovered a parsing error in the dissector for the Check Point High-Availability Protocol (CPHAP) (CVE-2009-1268). * Magnus Homann discovered a parsing error when loading a Tektronix .rf5 file (CVE-2009-1269). * The vendor reported that the PCNFSD dissector could crash (CVE-2009-1829). Impact ====== A remote attacker could exploit these vulnerabilities by sending specially crafted packets on a network being monitored by Wireshark or by enticing a user to read a malformed packet trace file which can trigger a Denial of Service (application crash or excessive CPU and memory usage) and possibly allow for the execution of arbitrary code with the privileges of the user running Wireshark. Workaround ========== There is no known workaround at this time. Resolution ========== All Wireshark users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-1.0.8" References ========== [ 1 ] CVE-2008-4680 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4680 [ 2 ] CVE-2008-4681 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4681 [ 3 ] CVE-2008-4682 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4682 [ 4 ] CVE-2008-4683 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4683 [ 5 ] CVE-2008-4684 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4684 [ 6 ] CVE-2008-4685 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4685 [ 7 ] CVE-2008-5285 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5285 [ 8 ] CVE-2008-6472 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6472 [ 9 ] CVE-2009-0599 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0599 [ 10 ] CVE-2009-0600 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0600 [ 11 ] CVE-2009-0601 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0601 [ 12 ] CVE-2009-1210 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1210 [ 13 ] CVE-2009-1266 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1266 [ 14 ] CVE-2009-1268 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1268 [ 15 ] CVE-2009-1269 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1269 [ 16 ] CVE-2009-1829 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1829 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200906-05.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2009 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0599 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0600 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0601 http://www.wireshark.org/security/wnpa-sec-2009-01.html _______________________________________________________________________ Updated Packages: Mandriva Linux 2008.1: 2d591a5772317d3587434424b8dc4a1d 2008.1/i586/dumpcap-1.0.6-0.1mdv2008.1.i586.rpm bf65e163112b4dc5db4041c552823bcb 2008.1/i586/libwireshark0-1.0.6-0.1mdv2008.1.i586.rpm 80056b13d9146428645d6e67cb2ed8ea 2008.1/i586/libwireshark-devel-1.0.6-0.1mdv2008.1.i586.rpm 7923294ad925674ef116b6273835d8ef 2008.1/i586/rawshark-1.0.6-0.1mdv2008.1.i586.rpm bd5a15d402a367058d61fd8dd6a2dcf9 2008.1/i586/tshark-1.0.6-0.1mdv2008.1.i586.rpm 5c7b0422b12d2eade1ce997de3766c6c 2008.1/i586/wireshark-1.0.6-0.1mdv2008.1.i586.rpm d116f95d212119516dbca4bf1d353cf5 2008.1/i586/wireshark-tools-1.0.6-0.1mdv2008.1.i586.rpm 2a31aab490fe670da93830f464154a48 2008.1/SRPMS/wireshark-1.0.6-0.1mdv2008.1.src.rpm Mandriva Linux 2008.1/X86_64: b7213fd4bf53ad0cb41b5cc5ab1057df 2008.1/x86_64/dumpcap-1.0.6-0.1mdv2008.1.x86_64.rpm 4e3f14a549d66f199171d6f91aa28c68 2008.1/x86_64/lib64wireshark0-1.0.6-0.1mdv2008.1.x86_64.rpm aa39e29909ed34d5df2f0c85ac560c8f 2008.1/x86_64/lib64wireshark-devel-1.0.6-0.1mdv2008.1.x86_64.rpm ef92c97f74a2811daf7d874755dd7777 2008.1/x86_64/rawshark-1.0.6-0.1mdv2008.1.x86_64.rpm ea555917cd20aba1f0b4114730ad9924 2008.1/x86_64/tshark-1.0.6-0.1mdv2008.1.x86_64.rpm c74402d6323f6a72188f214d2d002ef2 2008.1/x86_64/wireshark-1.0.6-0.1mdv2008.1.x86_64.rpm fa5e55f0a5934c2bae263e9151a40b16 2008.1/x86_64/wireshark-tools-1.0.6-0.1mdv2008.1.x86_64.rpm 2a31aab490fe670da93830f464154a48 2008.1/SRPMS/wireshark-1.0.6-0.1mdv2008.1.src.rpm Mandriva Linux 2009.0: c661639631224e605d41a2985af43c93 2009.0/i586/dumpcap-1.0.6-0.1mdv2009.0.i586.rpm bb633c409ddb95d2e6f6826b6fd2be3d 2009.0/i586/libwireshark0-1.0.6-0.1mdv2009.0.i586.rpm 5d2f7434a1dd322259907d14caf90e11 2009.0/i586/libwireshark-devel-1.0.6-0.1mdv2009.0.i586.rpm d32a3de9e13b83d991a2d6c8577f50c2 2009.0/i586/rawshark-1.0.6-0.1mdv2009.0.i586.rpm bcdf64d0e05d0bb964c946c83bdd5353 2009.0/i586/tshark-1.0.6-0.1mdv2009.0.i586.rpm 3537cea11294e8d1dff87c15b933c622 2009.0/i586/wireshark-1.0.6-0.1mdv2009.0.i586.rpm c5ef95f5eb5255e10ccc12bcb0c6d77a 2009.0/i586/wireshark-tools-1.0.6-0.1mdv2009.0.i586.rpm 3efca295d42d9e1686b46ca1c020f8a2 2009.0/SRPMS/wireshark-1.0.6-0.1mdv2009.0.src.rpm Mandriva Linux 2009.0/X86_64: 90cffab44fe29d55f527ab4b76b0a0d6 2009.0/x86_64/dumpcap-1.0.6-0.1mdv2009.0.x86_64.rpm 838159ecdc95655df014d17d04434297 2009.0/x86_64/lib64wireshark0-1.0.6-0.1mdv2009.0.x86_64.rpm d3dba0b501696a634627540517693b62 2009.0/x86_64/lib64wireshark-devel-1.0.6-0.1mdv2009.0.x86_64.rpm bf51f59064d3ce3dd2dafd6aaaa889df 2009.0/x86_64/rawshark-1.0.6-0.1mdv2009.0.x86_64.rpm 3e33480b37b90293e1fd77c33934b9d2 2009.0/x86_64/tshark-1.0.6-0.1mdv2009.0.x86_64.rpm 6a22be605ea9e2357c8c5f38a1d6cc78 2009.0/x86_64/wireshark-1.0.6-0.1mdv2009.0.x86_64.rpm a73dd1ee57fee0b886beb0542bdd3baa 2009.0/x86_64/wireshark-tools-1.0.6-0.1mdv2009.0.x86_64.rpm 3efca295d42d9e1686b46ca1c020f8a2 2009.0/SRPMS/wireshark-1.0.6-0.1mdv2009.0.src.rpm Corporate 4.0: cd40c4762bd0c4b5ffafc5023809ac04 corporate/4.0/i586/dumpcap-1.0.6-0.1.20060mlcs4.i586.rpm 629aa56a60730449858656e1ea062b84 corporate/4.0/i586/libwireshark0-1.0.6-0.1.20060mlcs4.i586.rpm e7674da06cff0db774a65d40c8407ce1 corporate/4.0/i586/libwireshark-devel-1.0.6-0.1.20060mlcs4.i586.rpm 76530bd71bb120b5325f9a09c39a2929 corporate/4.0/i586/rawshark-1.0.6-0.1.20060mlcs4.i586.rpm baa49a07548d639f2cb19a73c5e0df2f corporate/4.0/i586/tshark-1.0.6-0.1.20060mlcs4.i586.rpm c08beac1b46a39cbc0a46f0d360ccc40 corporate/4.0/i586/wireshark-1.0.6-0.1.20060mlcs4.i586.rpm 9e1170ca14c27d0a9b9279eb317743ad corporate/4.0/i586/wireshark-tools-1.0.6-0.1.20060mlcs4.i586.rpm dccd63a7f0c24d1ccbf5adac0374a460 corporate/4.0/SRPMS/wireshark-1.0.6-0.1.20060mlcs4.src.rpm Corporate 4.0/X86_64: 7d416c1d4b061a7af12eb8ddff174685 corporate/4.0/x86_64/dumpcap-1.0.6-0.1.20060mlcs4.x86_64.rpm 2c08582bff18197181d7021f471235cc corporate/4.0/x86_64/lib64wireshark0-1.0.6-0.1.20060mlcs4.x86_64.rpm 7128168a02a6dd0065d051a23992cdbe corporate/4.0/x86_64/lib64wireshark-devel-1.0.6-0.1.20060mlcs4.x86_64.rpm fee1072986b3bbbcacbe84a5def3513d corporate/4.0/x86_64/rawshark-1.0.6-0.1.20060mlcs4.x86_64.rpm c5a1394098d7c20613c51948b613ea2c corporate/4.0/x86_64/tshark-1.0.6-0.1.20060mlcs4.x86_64.rpm 279ada1e7a929b5df0a2e0813ee37d38 corporate/4.0/x86_64/wireshark-1.0.6-0.1.20060mlcs4.x86_64.rpm f28beac01c20e5d108d3390c07583918 corporate/4.0/x86_64/wireshark-tools-1.0.6-0.1.20060mlcs4.x86_64.rpm dccd63a7f0c24d1ccbf5adac0374a460 corporate/4.0/SRPMS/wireshark-1.0.6-0.1.20060mlcs4.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFJpxmTmqjQ0CJFipgRAvn+AKDefbliY7WKwLriDdVzrbgoh3FkFQCfUqov /+8NwA5cFnOJqNNg+MVuADw= =fAWE -----END PGP SIGNATURE----- . ---------------------------------------------------------------------- Did you know that a change in our assessment rating, exploit code availability, or if an updated patch is released by the vendor, is not part of this mailing-list? Click here to learn more: http://secunia.com/advisories/business_solutions/ ---------------------------------------------------------------------- TITLE: Wireshark NetScreen Snoop Capture File Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA33872 VERIFY ADVISORY: http://secunia.com/advisories/33872/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: >From remote SOFTWARE: Wireshark 1.x http://secunia.com/advisories/product/18083/ Wireshark (formerly Ethereal) 0.x http://secunia.com/advisories/product/1228/ DESCRIPTION: A vulnerability has been reported in Wireshark, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to a boundary error in the processing of NetScreen Snoop capture files and can be exploited to cause a stack-based buffer overflow. Successful exploitation may allow execution of arbitrary code depending on the allocation of stack variables. The vulnerability is reported in versions 0.99.7 through 1.0.5. SOLUTION: Update to version 1.0.6. PROVIDED AND/OR DISCOVERED BY: Reported by babi in a Wireshark bug report. ORIGINAL ADVISORY: http://www.wireshark.org/security/wnpa-sec-2009-01.html ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.34

sources: NVD: CVE-2009-0601 // JVNDB: JVNDB-2009-001408 // BID: 33690 // VULHUB: VHN-38047 // PACKETSTORM: 75731 // PACKETSTORM: 78760 // PACKETSTORM: 75245 // PACKETSTORM: 74778

AFFECTED PRODUCTS

vendor:wiresharkmodel:wiresharkscope:eqversion:1.0.5

Trust: 1.9

vendor:wiresharkmodel:wiresharkscope:eqversion:1.0.4

Trust: 1.9

vendor:wiresharkmodel:wiresharkscope:eqversion:1.0.3

Trust: 1.9

vendor:wiresharkmodel:wiresharkscope:eqversion:1.0.2

Trust: 1.9

vendor:wiresharkmodel:wiresharkscope:eqversion:1.0.1

Trust: 1.9

vendor:wiresharkmodel:wiresharkscope:eqversion:0.99.8

Trust: 1.9

vendor:wiresharkmodel:wiresharkscope:eqversion:1.0.0

Trust: 1.6

vendor:wiresharkmodel:wiresharkscope:eqversion:0.99.6 - 1.0.5

Trust: 0.8

vendor:wiresharkmodel:wiresharkscope:eqversion:1.0

Trust: 0.3

vendor:wiresharkmodel:wiresharkscope:eqversion:0.99.7

Trust: 0.3

vendor:wiresharkmodel:wiresharkscope:eqversion:0.99.6

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:11.1

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:11.0

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:10.3

Trust: 0.3

vendor:rpathmodel:linuxscope:eqversion:1

Trust: 0.3

vendor:redhatmodel:enterprise linux wsscope:eqversion:4

Trust: 0.3

vendor:redhatmodel:enterprise linux wsscope:eqversion:3

Trust: 0.3

vendor:redhatmodel:enterprise linux esscope:eqversion:4

Trust: 0.3

vendor:redhatmodel:enterprise linux esscope:eqversion:3

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop workstation clientscope:eqversion:5

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop clientscope:eqversion:5

Trust: 0.3

vendor:redhatmodel:enterprise linux asscope:eqversion:4

Trust: 0.3

vendor:redhatmodel:enterprise linux asscope:eqversion:3

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop versionscope:eqversion:4

Trust: 0.3

vendor:redhatmodel:enterprise linux serverscope:eqversion:5

Trust: 0.3

vendor:redhatmodel:desktopscope:eqversion:3.0

Trust: 0.3

vendor:mandrivamodel:linux mandrake x86 64scope:eqversion:2009.0

Trust: 0.3

vendor:mandrivamodel:linux mandrakescope:eqversion:2009.0

Trust: 0.3

vendor:mandrivamodel:linux mandrake x86 64scope:eqversion:2008.1

Trust: 0.3

vendor:mandrivamodel:linux mandrakescope:eqversion:2008.1

Trust: 0.3

vendor:mandrakesoftmodel:corporate server x86 64scope:eqversion:4.0

Trust: 0.3

vendor:mandrakesoftmodel:corporate serverscope:eqversion:4.0

Trust: 0.3

vendor:gentoomodel:linuxscope: - version: -

Trust: 0.3

vendor:avayamodel:messaging storage server mm3.0scope: - version: -

Trust: 0.3

vendor:avayamodel:messaging storage serverscope:eqversion:5.0

Trust: 0.3

vendor:avayamodel:messaging storage serverscope:eqversion:4.0

Trust: 0.3

vendor:avayamodel:messaging storage serverscope:eqversion:3.1

Trust: 0.3

vendor:avayamodel:messaging storage serverscope:eqversion:2.0

Trust: 0.3

vendor:avayamodel:messaging storage serverscope:eqversion:1.0

Trust: 0.3

vendor:avayamodel:messaging storage serverscope: - version: -

Trust: 0.3

vendor:avayamodel:communication manager sp1scope:eqversion:4.0.3

Trust: 0.3

vendor:avayamodel:communication manager sp2scope:eqversion:3.1.4

Trust: 0.3

vendor:avayamodel:communication managerscope:eqversion:5.1

Trust: 0.3

vendor:avayamodel:communication manager sp3scope:eqversion:5.0

Trust: 0.3

vendor:avayamodel:communication managerscope:eqversion:5.0

Trust: 0.3

vendor:avayamodel:communication managerscope:eqversion:4.0

Trust: 0.3

vendor:avayamodel:communication managerscope:eqversion:3.1

Trust: 0.3

vendor:avayamodel:communication managerscope:eqversion:3.0

Trust: 0.3

vendor:avayamodel:aura sip enablement servicesscope:eqversion:3.1.1

Trust: 0.3

vendor:avayamodel:aura sip enablement servicesscope:eqversion:5.0

Trust: 0.3

vendor:avayamodel:aura sip enablement servicesscope:eqversion:3.1

Trust: 0.3

vendor:avayamodel:aura sip enablement servicesscope:eqversion:3.0

Trust: 0.3

vendor:wiresharkmodel:wiresharkscope:neversion:1.0.6

Trust: 0.3

sources: BID: 33690 // JVNDB: JVNDB-2009-001408 // CNNVD: CNNVD-200902-363 // NVD: CVE-2009-0601

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2009-0601
value: LOW

Trust: 1.0

NVD: CVE-2009-0601
value: LOW

Trust: 0.8

CNNVD: CNNVD-200902-363
value: LOW

Trust: 0.6

VULHUB: VHN-38047
value: LOW

Trust: 0.1

nvd@nist.gov: CVE-2009-0601
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-38047
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-38047 // JVNDB: JVNDB-2009-001408 // CNNVD: CNNVD-200902-363 // NVD: CVE-2009-0601

PROBLEMTYPE DATA

problemtype:CWE-134

Trust: 1.8

sources: JVNDB: JVNDB-2009-001408 // NVD: CVE-2009-0601

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-200902-363

TYPE

format string

Trust: 0.6

sources: CNNVD: CNNVD-200902-363

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2009-001408

PATCH
title:Bug 3150url:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937
Trust: 0.8
title:wnpa-sec-2009-01url:http://www.wireshark.org/security/wnpa-sec-2009-01.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2009-001408

EXTERNAL IDS
db:NVDid:CVE-2009-0601
Trust: 3.0
db:BIDid:33690
Trust: 2.8
db:VUPENid:ADV-2009-0370
Trust: 2.5
db:SECUNIAid:34264
Trust: 1.8
db:SECTRACKid:1021697
Trust: 1.7
db:SECUNIAid:33872
Trust: 0.9
db:JVNDBid:JVNDB-2009-001408
Trust: 0.8
db:CNNVDid:CNNVD-200902-363
Trust: 0.7
db:BUGTRAQid:20090312 RPSA-2009-0040-1 TSHARK WIRESHARK
Trust: 0.6
db:SUSEid:SUSE-SR:2009:005
Trust: 0.6
db:VULHUBid:VHN-38047
Trust: 0.1
db:PACKETSTORMid:75731
Trust: 0.1
db:PACKETSTORMid:78760
Trust: 0.1
db:PACKETSTORMid:75245
Trust: 0.1
db:PACKETSTORMid:74778
Trust: 0.1
sources:
            
            
            VULHUB: VHN-38047 // 
            
            
            
            BID: 33690 // 
            
            
            
            JVNDB: JVNDB-2009-001408 // 
            
            
            
            PACKETSTORM: 75731 // 
            
            
            
            PACKETSTORM: 78760 // 
            
            
            
            PACKETSTORM: 75245 // 
            
            
            
            PACKETSTORM: 74778 // 
            
            
            
            CNNVD: CNNVD-200902-363 // 
            
            
            
            NVD: CVE-2009-0601

REFERENCES
url:http://www.securityfocus.com/bid/33690
Trust: 2.5
url:http://www.wireshark.org/security/wnpa-sec-2009-01.html
Trust: 2.2
url:http://www.vupen.com/english/advisories/2009/0370
Trust: 1.9
url:http://wiki.rpath.com/advisories:rpsa-2009-0040
Trust: 1.7
url:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3150
Trust: 1.7
url:https://issues.rpath.com/browse/rpl-2984
Trust: 1.7
url:http://www.securitytracker.com/id?1021697
Trust: 1.7
url:http://secunia.com/advisories/34264
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
Trust: 1.7
url:http://www.securityfocus.com/archive/1/501763/100/0/threaded
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0601
Trust: 1.0
url:http://secunia.com/advisories/33872/
Trust: 1.0
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-0601
Trust: 0.8
url:http://www.frsirt.com/english/advisories/2009/0370
Trust: 0.6
url:http://www.securityfocus.com/archive/1/archive/1/501763/100/0/threaded
Trust: 0.6
url:http://www.wireshark.org/
Trust: 0.3
url:http://support.avaya.com/elmodocs2/security/asa-2009-082.htm
Trust: 0.3
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.2
url:http://secunia.com/advisories/business_solutions/
Trust: 0.2
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.2
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-0600
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-0601
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0600
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2009-0599
Trust: 0.2
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0599
Trust: 0.2
url:http://secunia.com/advisories/34264/
Trust: 0.1
url:http://secunia.com/advisories/try_vi/
Trust: 0.1
url:http://wiki.rpath.com/wiki/advisories:rpsa-2009-0040
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-4685
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-4682
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1210
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-1268
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2008-6472
Trust: 0.1
url:http://security.gentoo.org/glsa/glsa-200906-05.xml
Trust: 0.1
url:http://bugs.gentoo.org.
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-1210
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2008-4685
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2008-4684
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2008-4681
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1266
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1269
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5285
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2008-4683
Trust: 0.1
url:http://creativecommons.org/licenses/by-sa/2.5
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2008-4682
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2008-5285
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-4680
Trust: 0.1
url:http://security.gentoo.org/
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1268
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-6472
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-1269
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-1829
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1829
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-4681
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-4684
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2009-1266
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-4683
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2008-4680
Trust: 0.1
url:http://www.mandriva.com/security/
Trust: 0.1
url:http://www.mandriva.com/security/advisories
Trust: 0.1
url:http://secunia.com/advisories/product/18083/
Trust: 0.1
url:http://secunia.com/advisories/product/1228/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-38047 // 
            
            
            
            BID: 33690 // 
            
            
            
            JVNDB: JVNDB-2009-001408 // 
            
            
            
            PACKETSTORM: 75731 // 
            
            
            
            PACKETSTORM: 78760 // 
            
            
            
            PACKETSTORM: 75245 // 
            
            
            
            PACKETSTORM: 74778 // 
            
            
            
            CNNVD: CNNVD-200902-363 // 
            
            
            
            NVD: CVE-2009-0601

CREDITS
Magnus Homann   magnus@homann.se
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-200902-363

SOURCES
db:VULHUBid:VHN-38047
db:BIDid:33690
db:JVNDBid:JVNDB-2009-001408
db:PACKETSTORMid:75731
db:PACKETSTORMid:78760
db:PACKETSTORMid:75245
db:PACKETSTORMid:74778
db:CNNVDid:CNNVD-200902-363
db:NVDid:CVE-2009-0601

LAST UPDATE DATE
2024-11-23T19:23:41.099000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-38047date:2018-10-10T00:00:00
db:BIDid:33690date:2015-04-13T22:05:00
db:JVNDBid:JVNDB-2009-001408date:2009-06-30T00:00:00
db:CNNVDid:CNNVD-200902-363date:2009-03-17T00:00:00
db:NVDid:CVE-2009-0601date:2024-11-21T01:00:28.253

SOURCES RELEASE DATE
db:VULHUBid:VHN-38047date:2009-02-16T00:00:00
db:BIDid:33690date:2009-02-09T00:00:00
db:JVNDBid:JVNDB-2009-001408date:2009-06-30T00:00:00
db:PACKETSTORMid:75731date:2009-03-16T11:58:45
db:PACKETSTORMid:78760date:2009-06-30T20:03:53
db:PACKETSTORMid:75245date:2009-02-27T18:36:15
db:PACKETSTORMid:74778date:2009-02-09T14:22:36
db:CNNVDid:CNNVD-200902-363date:2009-02-16T00:00:00
db:NVDid:CVE-2009-0601date:2009-02-16T20:30:03.127