Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors.

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities :

  - crash while loading a Tektronix .rf5 file CVE-2009-1268:
    crash in Check Point High-Availability Protocol (CPHAP)     dissector CVE-2009-1267: LDAP dissector could crash on     Windows CVE-2009-1210: PROFINET format string bug     CVE-2009-1266: additional PROFINET format string bugs, a     crash in the PCNFSD dissector. (CVE-2009-1269)

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities :

  - crash while loading a Tektronix .rf5 file.
    (CVE-2009-1269)

  - crash in Check Point High-Availability Protocol (CPHAP)     dissector. (CVE-2009-1268)

  - LDAP dissector could crash on Windows. (CVE-2009-1267)

  - PROFINET format string bug. (CVE-2009-1210)

  - additional PROFINET format string bugs, a crash in the     PCNFSD dissector. (CVE-2009-1266)

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities:
CVE-2009-1269: crash while loading a Tektronix .rf5 file CVE-2009-1268: crash in Check Point High-Availability Protocol (CPHAP) dissector CVE-2009-1267: LDAP dissector could crash on Windows CVE-2009-1210: PROFINET format string bug CVE-2009-1266: additional PROFINET format string bugs, a crash in the PCNFSD dissector

The installed version of Wireshark or Ethereal is affected by multiple issues :

  - The PROFINET dissector is affected by a format string     vulnerability which an attacker could exploit to execute     arbitrary code. (Bug 3372)

  - Wireshark could crash while reading a malformed LDAP     capture file. (Bug 3262)

  - Wireshark could crash while reading a malformed Check     Point High-Availability Protocol capture file.     (Bug 3269)

  - Wireshark could crash while reading a Tektronix .rf5     capture file. (Bug 3366)

ID	Name	Product	Family	Severity
41506	SuSE 10 Security Update : ethereal (ZYPP Patch Number 6269)	Nessus	SuSE Local Security Checks	critical
41460	SuSE 11 Security Update : wireshark (SAT Patch Number 910)	Nessus	SuSE Local Security Checks	critical
41303	SuSE9 Security Update : ethereal (YOU Patch Number 12424)	Nessus	SuSE Local Security Checks	critical
40323	openSUSE Security Update : wireshark (wireshark-912)	Nessus	SuSE Local Security Checks	critical
40154	openSUSE Security Update : wireshark (wireshark-912)	Nessus	SuSE Local Security Checks	critical
38924	openSUSE 10 Security Update : wireshark (wireshark-6271)	Nessus	SuSE Local Security Checks	critical
36127	Wireshark / Ethereal 0.99.2 to 1.0.6 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2009-1267

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

high