FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-0599

This CVE name corresponds to:

Entered	Topic
2009-03-22	wireshark -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-0599 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-0599
Phase	Assigned(20090216)

Description

Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.

References

Source	Reference
BUGTRAQ	20090312 rPSA-2009-0040-1 tshark wireshark
CONFIRM	http://www.wireshark.org/security/wnpa-sec-2009-01.html
CONFIRM	https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2590
CONFIRM	http://wiki.rpath.com/Advisories:rPSA-2009-0040
CONFIRM	https://issues.rpath.com/browse/RPL-2984
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm
FEDORA	FEDORA-2009-1877
REDHAT	RHSA-2009:0313
SUSE	SUSE-SR:2009:005
BID	33690
OVAL	oval:org.mitre.oval:def:9677
OVAL	oval:org.mitre.oval:def:14732
SECUNIA	34264
SECUNIA	34344
SECUNIA	34144
VUPEN	ADV-2009-0370
OSVDB	51815
SECTRACK	1021697
SECUNIA	33872