Wireshark multiple security vulnerabilities
Published:		10.04.2009
Source:		BUGTRAQ
SecurityVulns ID:		9809
Type:		remote
Level:		6/10
Description:		PROFINET protocol dissector format string vulnerability, Check Point High-Availability Protocol (CPHAP) dissector DoS, .rf5 file parses DoS.

Affected:		WIRESHARK : Wireshark 1.0
CVE:		CVE-2009-1269 (Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.)
		CVE-2009-1268 (The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.)
		CVE-2009-1210 (Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.)

Original document

MANDRIVA, [ MDVSA-2009:088 ] wireshark (10.04.2009)

Discuss:

Read or add your comments to this news (0 comments)