FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-5285

This CVE name corresponds to:

Entered	Topic
2008-12-07	wireshark -- SMTP Processing Denial of Service Vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-5285 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-5285
Phase	Assigned(20081201)

Description

Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop.

References

Source	Reference
BUGTRAQ	20081122 [SVRT-04-08] Vulnerability in WireShark 1.0.4 for DoS Attack
BUGTRAQ	20081211 rPSA-2008-0336-1 tshark wireshark
FULLDISC	20081122 [SVRT-04-08] Vulnerability in WireShark 1.0.4 for DoS Attack
MLIST	[oss-security] 20081124 CVE Request -- wireshark
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=472737
CONFIRM	http://wiki.rpath.com/Advisories:rPSA-2008-0336
CONFIRM	http://www.wireshark.org/security/wnpa-sec-2008-07.html
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm
MANDRIVA	MDVSA-2008:242
REDHAT	RHSA-2009:0313
BID	32422
OVAL	oval:org.mitre.oval:def:11351
SECUNIA	34144
VUPEN	ADV-2008-3231
SECTRACK	1021275
SECUNIA	32840
SREASON	4663