| Vulnerability Name: | CVE-2007-6117 (CCN-38744) | ||||||||||||||||||||||||||||||||
| Assigned: | 2007-11-22 | ||||||||||||||||||||||||||||||||
| Published: | 2007-11-22 | ||||||||||||||||||||||||||||||||
| Updated: | 2018-10-15 | ||||||||||||||||||||||||||||||||
| Summary: | Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages. | ||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||||||||||||||
| References: | Source: MISC Type: UNKNOWN http://bugs.gentoo.org/show_bug.cgi?id=199958 Source: MITRE Type: CNA CVE-2007-6117 Source: SUSE Type: UNKNOWN SUSE-SR:2008:004 Source: CCN Type: RHSA-2008-0058 Moderate: wireshark security update Source: CCN Type: RHSA-2008-0059 Moderate: wireshark security update Source: CCN Type: SA27777 Wireshark Multiple Denial of Service Vulnerabilities Source: SECUNIA Type: Vendor Advisory 27777 Source: SECUNIA Type: Vendor Advisory 27817 Source: SECUNIA Type: Vendor Advisory 28197 Source: SECUNIA Type: Vendor Advisory 28207 Source: SECUNIA Type: Vendor Advisory 28288 Source: SECUNIA Type: Vendor Advisory 28304 Source: SECUNIA Type: Vendor Advisory 28325 Source: SECUNIA Type: Vendor Advisory 28564 Source: SECUNIA Type: Vendor Advisory 28583 Source: SECUNIA Type: Vendor Advisory 29048 Source: GENTOO Type: UNKNOWN GLSA-200712-23 Source: CCN Type: SECTRACK ID: 1018988 Wireshark Wireshark MP3, DNP, SSL, ANSI MAP, Firebird/Interbase, NCP, HTTP, MEGACO, DCP ETSI, OS/400, PPP, Bluetooth SDP, and RPC Portmap Bugs Let Remote Users Deny Service Source: SECTRACK Type: UNKNOWN 1018988 Source: CCN Type: ASA-2008-034 wireshark security update (RHSA-2008-0059) Source: CCN Type: ASA-2008-093 wireshark security update (RHSA-2008-0058) Source: CONFIRM Type: UNKNOWN http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 Source: DEBIAN Type: UNKNOWN DSA-1414 Source: DEBIAN Type: DSA-1414 wireshark -- several vulnerabilities Source: CCN Type: GLSA-200712-23 Wireshark: Multiple vulnerabilities Source: MANDRIVA Type: UNKNOWN MDVSA-2008:001 Source: MANDRIVA Type: UNKNOWN MDVSA-2008:1 Source: REDHAT Type: UNKNOWN RHSA-2008:0058 Source: REDHAT Type: UNKNOWN RHSA-2008:0059 Source: BUGTRAQ Type: UNKNOWN 20080103 rPSA-2008-0004-1 tshark wireshark Source: BID Type: Patch 26532 Source: CCN Type: BID-26532 Wireshark 0.99.6 Multiple Remote Vulnerabilities Source: VUPEN Type: Vendor Advisory ADV-2007-3956 Source: CONFIRM Type: Vendor Advisory http://www.wireshark.org/docs/relnotes/wireshark-0.99.7.html Source: CCN Type: Wireshark Web site Wireshark: Download Source: CCN Type: wnpa-sec-2007-03 Multiple problems in Wireshark® (formerly Ethereal®) versions 0.8.16 to 0.99.5 Source: CONFIRM Type: Patch, Vendor Advisory http://www.wireshark.org/security/wnpa-sec-2007-03.html Source: CONFIRM Type: UNKNOWN https://bugzilla.redhat.com/show_bug.cgi?id=397331 Source: XF Type: UNKNOWN wireshark-http-dissector-dos(38744) Source: CONFIRM Type: UNKNOWN https://issues.rpath.com/browse/RPL-1975 Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:11508 Source: FEDORA Type: UNKNOWN FEDORA-2007-4590 Source: FEDORA Type: UNKNOWN FEDORA-2007-4690 Source: SUSE Type: SUSE-SR:2008:004 SUSE Security Summary Report | ||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration RedHat 1: Configuration RedHat 2: Configuration RedHat 3: Configuration RedHat 4: Configuration RedHat 5: Configuration RedHat 6: Configuration RedHat 7: Configuration RedHat 8: Configuration RedHat 9:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||