CVE

Id
34801  
CVE No.
CVE-2008-4684  
Status
Candidate  
Description
packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector.  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381040 34801 CVE-2008-4684 BUGTRAQ:20081211 rPSA-2008-0336-1 tshark wireshark  View
381041 34801 CVE-2008-4684 URL:http://www.securityfocus.com/archive/1/archive/1/499154/100/0/threaded  View
381042 34801 CVE-2008-4684 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2008-06.html  View
381043 34801 CVE-2008-4684 CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2549  View
381044 34801 CVE-2008-4684 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2008-0336  View
381045 34801 CVE-2008-4684 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm  View
381046 34801 CVE-2008-4684 DEBIAN:DSA-1673  View
381047 34801 CVE-2008-4684 URL:http://www.debian.org/security/2008/dsa-1673  View
381048 34801 CVE-2008-4684 MANDRIVA:MDVSA-2008:215  View
381049 34801 CVE-2008-4684 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:215  View
381050 34801 CVE-2008-4684 REDHAT:RHSA-2009:0313  View
381051 34801 CVE-2008-4684 URL:http://www.redhat.com/support/errata/RHSA-2009-0313.html  View
381052 34801 CVE-2008-4684 BID:31838  View
381053 34801 CVE-2008-4684 URL:http://www.securityfocus.com/bid/31838  View
381054 34801 CVE-2008-4684 OVAL:oval:org.mitre.oval:def:10223  View
381055 34801 CVE-2008-4684 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10223  View
381056 34801 CVE-2008-4684 OVAL:oval:org.mitre.oval:def:14767  View
381057 34801 CVE-2008-4684 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14767  View
381058 34801 CVE-2008-4684 SECUNIA:34144  View
381059 34801 CVE-2008-4684 URL:http://secunia.com/advisories/34144  View
381060 34801 CVE-2008-4684 VUPEN:ADV-2008-2872  View
381061 34801 CVE-2008-4684 URL:http://www.vupen.com/english/advisories/2008/2872  View
381062 34801 CVE-2008-4684 SECTRACK:1021069  View
381063 34801 CVE-2008-4684 URL:http://securitytracker.com/id?1021069  View
381064 34801 CVE-2008-4684 SECUNIA:32355  View
381065 34801 CVE-2008-4684 URL:http://secunia.com/advisories/32355  View
381066 34801 CVE-2008-4684 SECUNIA:32944  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47098 JVNDB-2008-002408 Mantis の core/string_api.php における不正に issue 情報を取得される脆弱性 Mantis の core/string_api.php には、元データ末尾の issue 情報とのリンク構成前に閲覧者の権限を確認しないため、不正に issue 情報を取得される脆弱性が存在します。 CVE-2008-4688 34801 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002408.html  View