CVE-2007-3392 - Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL o

CVE-2007-3392

Summary

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.

References

Vulnerable Configurations

cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 16-10-2018 - 16:49)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

oval via4

accepted

2013-04-29T04:07:33.107-04:00

class

vulnerability

contributors

name Aharon Chernin
organization SCAP.com, LLC
name Dragos Prisaca
organization G2, Inc.

definition_extensions

comment The operating system installed on the system is Red Hat Enterprise Linux 3
oval oval:org.mitre.oval:def:11782
comment CentOS Linux 3.x
oval oval:org.mitre.oval:def:16651
comment The operating system installed on the system is Red Hat Enterprise Linux 4
oval oval:org.mitre.oval:def:11831
comment CentOS Linux 4.x
oval oval:org.mitre.oval:def:16636
comment Oracle Linux 4.x
oval oval:org.mitre.oval:def:15990
comment The operating system installed on the system is Red Hat Enterprise Linux 5
oval oval:org.mitre.oval:def:11414
comment The operating system installed on the system is CentOS Linux 5.x
oval oval:org.mitre.oval:def:15802
comment Oracle Linux 5.x
oval oval:org.mitre.oval:def:15459

description

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.

family

unix

oval:org.mitre.oval:def:10663

status

accepted

submitted

2010-07-09T03:56:16-04:00

title

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.

version

redhat via4

advisories

rhsa
id RHSA-2007:0709
rhsa
id RHSA-2007:0710
rhsa
id RHSA-2008:0059

rpms

wireshark-0:0.99.6-EL4.1
wireshark-debuginfo-0:0.99.6-EL4.1
wireshark-gnome-0:0.99.6-EL4.1
wireshark-0:0.99.6-1.el5
wireshark-debuginfo-0:0.99.6-1.el5
wireshark-gnome-0:0.99.6-1.el5
libsmi-0:0.4.5-3.el3
libsmi-debuginfo-0:0.4.5-3.el3
libsmi-devel-0:0.4.5-3.el3
wireshark-0:0.99.7-EL3.1
wireshark-debuginfo-0:0.99.7-EL3.1
wireshark-gnome-0:0.99.7-EL3.1

refmap via4

bid	24662
bugtraq	20070814 WireShark MMS Remote Denial of Service vulnerability
confirm	http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1582 http://www.wireshark.org/docs/relnotes/wireshark-0.99.6.html http://www.wireshark.org/security/wnpa-sec-2007-02.html https://issues.rpath.com/browse/RPL-1498
debian	DSA-1322
gentoo	GLSA-200708-12
mandriva	MDKSA-2007:145
sectrack	1018315
secunia	25833 25877 25987 26004 26499 28583
suse	SUSE-SR:2007:015
vupen	ADV-2007-2353
xf	wireshark-sslmms-dos(35203)

Last major update

16-10-2018 - 16:49

Published

26-06-2007 - 00:30

Last modified

16-10-2018 - 16:49