Detections
Analytics
Oracle Solaris Third-Party Patch Update : wireshark (denial_of_service_vulnerability_in)
high Nessus Plugin ID 80800
Language:
Synopsis
The remote Solaris system is missing a security patch for third-party software.Description
The remote Solaris system is missing necessary patches to address security updates :- The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree. (CVE-2011-3266)
- Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory. (CVE-2011-3360)
- The dissect_infiniband_common function in epan/dissectors/packet-infiniband.c in the Infiniband dissector in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet. (CVE-2011-4101)
Solution
Upgrade to Solaris 11/11 SRU 02.See Also
http://www.nessus.org/u?4a913f44
Plugin Details
Severity: High
ID: 80800
File Name: solaris11_wireshark_20111205.nasl
Version: 1.5
Type: local
Family: Solaris Local Security Checks
Published: 1/19/2015
Updated: 1/14/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:oracle:solaris:11.0, p-cpe:/a:oracle:solaris:wireshark
Required KB Items: Host/local_checks_enabled, Host/Solaris11/release, Host/Solaris11/pkg-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 12/5/2011
Exploitable With
CANVAS (White_Phosphorus)
Core Impact
Metasploit (Wireshark console.lua Pre-Loading Script Execution)