Test ID:	1.3.6.1.4.1.25623.1.0.801035
Category:	Denial of Service
Title:	Wireshark 'DCERPC/NT' Dissector DoS Vulnerability (Nov 2009) - Linux
Summary:	Wireshark is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Wireshark is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to a NULL pointer dereference error within the 'DCERPC/NT' dissector that can be exploited to cause a crash. Vulnerability Impact: Successful exploitation could result in a DoS condition. Affected Software/OS: Wireshark version 0.10.13 to 1.0.9 and 1.2.0 to 1.2.2 on Linux. Solution: Upgrade to Wireshark 1.0.10 or 1.2.3. Workaround: Disable the affected dissectors. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3550 36846 http://www.securityfocus.com/bid/36846 37175 http://secunia.com/advisories/37175 37409 http://secunia.com/advisories/37409 37477 http://secunia.com/advisories/37477 ADV-2009-3061 http://www.vupen.com/english/advisories/2009/3061 DSA-1942 http://www.debian.org/security/2009/dsa-1942 http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html http://www.wireshark.org/security/wnpa-sec-2009-07.html http://www.wireshark.org/security/wnpa-sec-2009-08.html oval:org.mitre.oval:def:10103 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103 oval:org.mitre.oval:def:6005 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005 wireshark-dcerpcnt-dos(54017) https://exchange.xforce.ibmcloud.com/vulnerabilities/54017
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.