漏洞信息详情

Wireshark协议分析器拒绝服务攻击漏洞

• CNNVD编号：CNNVD-200607-337
• 危害等级： 低危
  
• CVE编号： CVE-2006-3631
• 漏洞类型： 资源管理错误
• 发布时间： 2006-07-21
• 威胁类型： 远程
• 更新时间： 2007-06-27
• 厂        商： wireshark
• 漏洞来源： The vendor credits...

漏洞简介

Wireshark (又称 Ethereal) 0.9.10到0.99.0版本存在未明漏洞，远程攻击者可以通过未知攻击向量来发起拒绝服务攻击(无限循环)。

漏洞公告

Ethereal Group Ethereal 0.10.10

• Debian ethereal-common_0.10.10-2sarge6_alpha.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_alpha.deb

• Debian ethereal-common_0.10.10-2sarge6_amd64.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_amd64.deb

• Debian ethereal-common_0.10.10-2sarge6_arm.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_arm.deb

• Debian ethereal-common_0.10.10-2sarge6_hppa.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_hppa.deb

• Debian ethereal-common_0.10.10-2sarge6_i386.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_i386.deb

• Debian ethereal-common_0.10.10-2sarge6_ia64.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_ia64.deb

• Debian ethereal-common_0.10.10-2sarge6_m68k.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_m68k.deb

• Debian ethereal-common_0.10.10-2sarge6_mips.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_mips.deb

• Debian ethereal-common_0.10.10-2sarge6_mipsel.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_mipsel.deb

• Debian ethereal-common_0.10.10-2sarge6_powerpc.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_powerpc.deb

• Debian ethereal-common_0.10.10-2sarge6_s390.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org/pool/updates/main/e/ethereal/ethereal-commo

  n_0.10.10-2sarge6_s390.deb

• Debian ethereal-common_0.10.10-2sarge6_sparc.debDebian GNU/Linux 3.1 alias sarge

  http://security.debian.org

参考网址

来源: www.wireshark.org

链接:http://www.wireshark.org/security/wnpa-sec-2006-01.HTML

来源: XF

名称: wireshark-ssh-dos(27829)

链接:http://xforce.iss.net/xforce/xfdb/27829

来源: BID

名称: 19051

链接:http://www.securityfocus.com/bid/19051

来源: BUGTRAQ

名称: 20060719 rPSA-2006-0132-1 tshark wireshark

链接:http://www.securityfocus.com/archive/1/archive/1/440576/100/0/threaded

来源: SUSE

名称: SUSE-SR:2006:020

链接:http://www.novell.com/linux/security/advisories/2006_20_sr.HTML

来源: VUPEN

名称: ADV-2006-2850

链接:http://www.frsirt.com/english/advisories/2006/2850

来源: DEBIAN

名称: DSA-1127

链接:http://www.debian.org/security/2006/dsa-1127

来源: support.avaya.com

链接:http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm

来源: SECTRACK

名称: 1016532

链接:http://securitytracker.com/id?1016532

来源: GENTOO

名称: GLSA-200607-09

链接:http://security.gentoo.org/glsa/glsa-200607-09.xml

来源: SECUNIA

名称: 22089

链接:http://secunia.com/advisories/22089

来源: SECUNIA

名称: 21598

链接:http://secunia.com/advisories/21598

来源: SECUNIA

名称: 21488

链接:http://secunia.com/advisories/21488

来源: SECUNIA

名称: 21467

链接:http://secunia.com/advisories/21467

来源: SECUNIA

名称: 21249

链接:http://secunia.com/advisories/21249

来源: SECUNIA

名称: 21204

链接:http://secunia.com/advisories/21204

来源: SECUNIA

名称: 21121

链接:http://secunia.com/advisories/21121

来源: SECUNIA

名称: 21107

链接:http://secunia.com/advisories/21107

来源: SECUNIA

名称: 21078

链接:http://secunia.com/advisories/21078

来源: REDHAT

名称: RHSA-2006:0602

链接:http://rhn.redhat.com/errata/RHSA-2006-0602.HTML

来源: MANDRIVA

名称: MDKSA-2006:128

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:128

来源: SGI

名称: 20060801-01-P

链接:ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P

来源: OSVDB

名称: 27370

链接:http://www.osvdb.org/27370

来源: MANDRIVA

名称: MDKSA-2006:128

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:128

受影响实体

• Wireshark Wireshark:0.9.2  
• Wireshark Wireshark:0.9.5  
• Wireshark Wireshark:0.9.6  
• Wireshark Wireshark:0.9.7  
• Wireshark Wireshark:0.9.8  

补丁

暂无