Test ID:	1.3.6.1.4.1.25623.1.0.900989
Category:	Denial of Service
Title:	Wireshark Daintree SNA File Parser Denial of Service Vulnerability - Linux
Summary:	Wireshark is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Wireshark is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: A boundary error occurs in the 'daintree_sna_read()' function in the Daintree SNA file parser while processing malformed captured pcap files. Vulnerability Impact: Successful exploitation will allow attackers to cause Denial of service condition by tricking the user into opening a malformed packet trace file through Wireshark. Affected Software/OS: Wireshark version 1.2.0 to 1.2.4 on Linux. Solution: Upgrade to Wireshark version 1.2.5. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4376 BugTraq ID: 37407 http://www.securityfocus.com/bid/37407 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4022 http://osvdb.org/61177 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16435 http://www.securitytracker.com/id?1023374 http://secunia.com/advisories/37842 http://secunia.com/advisories/37916 http://www.vupen.com/english/advisories/2009/3596
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.