Wireshark 1.0.5 Multiple Denial Of Service Vulnerabilities

Bugtraq ID:	33690
Class:	Unknown
CVE:	CVE-2009-0599 CVE-2009-0600 CVE-2009-0601
Remote:	Yes
Local:	No
Published:	Feb 09 2009 12:00AM
Updated:	Apr 13 2015 10:05PM
Credit:	babi and Magnus Homann
Vulnerable:	Wireshark Wireshark 1.0.5 Wireshark Wireshark 1.0.4 Wireshark Wireshark 1.0.3 Wireshark Wireshark 1.0.2 Wireshark Wireshark 1.0.1 Wireshark Wireshark 1.0 Wireshark Wireshark 0.99.8 Wireshark Wireshark 0.99.7 Wireshark Wireshark 0.99.6 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 rPath rPath Linux 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Redhat Desktop 3.0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Communication Manager 4.0.3 SP1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 3.1.4 SP2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 5.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 5.0 SP3 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 5.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 3.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 + Avaya Communication Manager Server S8700 Avaya Aura SIP Enablement Services 3.1.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 3.1 Avaya Aura SIP Enablement Services 3.0
Not Vulnerable:	Wireshark Wireshark 1.0.6

Wireshark 1.0.5 Multiple Denial Of Service Vulnerabilities

Wireshark is prone to multiple denial-of-service vulnerabilities.

Exploiting these issues may allow attackers to crash the application, denying service to legitimate users. Attackers may be able to leverage some of these vulnerabilities to execute arbitrary code, but this has not been confirmed.

These issues affect Wireshark 0.99.6 through 1.0.5.

Wireshark 1.0.5 Multiple Denial Of Service Vulnerabilities

An attacker may exploit these issues using readily available tools.

Wireshark 1.0.5 Multiple Denial Of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva dumpcap-1.0.6-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark-devel-1.0.6-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark0-1.0.6-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.0.6-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.0.6-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.0.6-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.0.6-0.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.1

• Mandriva dumpcap-1.0.6-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark-devel-1.0.6-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark0-1.0.6-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.0.6-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.0.6-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.0.6-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.0.6-0.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.0

• Mandriva dumpcap-1.0.6-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark-devel-1.0.6-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark0-1.0.6-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.0.6-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.0.6-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.0.6-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.0.6-0.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0

• Mandriva dumpcap-1.0.6-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark-devel-1.0.6-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark0-1.0.6-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.0.6-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.0.6-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.0.6-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.0.6-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva dumpcap-1.0.6-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark-devel-1.0.6-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark0-1.0.6-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.0.6-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.0.6-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.0.6-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.0.6-0.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Wireshark Wireshark 0.99.6

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

Wireshark Wireshark 0.99.7

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

Wireshark Wireshark 0.99.8

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

Wireshark Wireshark 1.0

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

Wireshark Wireshark 1.0.1

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

Wireshark Wireshark 1.0.2

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

Wireshark Wireshark 1.0.3

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

Wireshark Wireshark 1.0.4

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

Wireshark Wireshark 1.0.5

• Wireshark wireshark-1.0.6.tar.bz2
  http://www.wireshark.org/download/src/wireshark-1.0.6.tar.bz2

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva dumpcap-1.0.6-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark-devel-1.0.6-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark0-1.0.6-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.0.6-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.0.6-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.0.6-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.0.6-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

Wireshark 1.0.5 Multiple Denial Of Service Vulnerabilities

References:

• Multiple problems in Wireshark® versions 0.99.6 to 1.0.5 (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• ASA-2009-082 wireshark security update (RHSA-2009-0313) (Avaya)