1. CVE-Search
  2. CVE-2008-1072
ID CVE-2008-1072
Summary The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.
References
Vulnerable Configurations
  • cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*
CVSS
Base: 4.7 (as of 11-10-2018 - 20:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:L/AC:M/Au:N/C:N/I:N/A:C
oval via4
accepted 2013-04-29T04:03:06.644-04:00
class vulnerability
contributors
  • name Aharon Chernin
    organization SCAP.com, LLC
  • name Dragos Prisaca
    organization G2, Inc.
definition_extensions
  • comment The operating system installed on the system is Red Hat Enterprise Linux 3
    oval oval:org.mitre.oval:def:11782
  • comment CentOS Linux 3.x
    oval oval:org.mitre.oval:def:16651
  • comment The operating system installed on the system is Red Hat Enterprise Linux 4
    oval oval:org.mitre.oval:def:11831
  • comment CentOS Linux 4.x
    oval oval:org.mitre.oval:def:16636
  • comment Oracle Linux 4.x
    oval oval:org.mitre.oval:def:15990
  • comment The operating system installed on the system is Red Hat Enterprise Linux 5
    oval oval:org.mitre.oval:def:11414
  • comment The operating system installed on the system is CentOS Linux 5.x
    oval oval:org.mitre.oval:def:15802
  • comment Oracle Linux 5.x
    oval oval:org.mitre.oval:def:15459
description The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.
family unix
id oval:org.mitre.oval:def:10188
status accepted
submitted 2010-07-09T03:56:16-04:00
title The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.
version 30
redhat via4
advisories
rhsa
id RHSA-2008:0890
rpms
  • wireshark-0:1.0.3-3.el4_7
  • wireshark-0:1.0.3-4.el5_2
  • wireshark-0:1.0.3-EL3.3
  • wireshark-debuginfo-0:1.0.3-3.el4_7
  • wireshark-debuginfo-0:1.0.3-4.el5_2
  • wireshark-debuginfo-0:1.0.3-EL3.3
  • wireshark-gnome-0:1.0.3-3.el4_7
  • wireshark-gnome-0:1.0.3-4.el5_2
  • wireshark-gnome-0:1.0.3-EL3.3
refmap via4
bid 28025
bugtraq 20080229 rPSA-2008-0092-1 tshark wireshark
confirm
fedora
  • FEDORA-2008-2941
  • FEDORA-2008-3040
gentoo GLSA-200803-32
mandriva MDVSA-2008:057
sectrack 1019515
secunia
  • 29156
  • 29188
  • 29223
  • 29242
  • 29511
  • 29736
  • 32091
suse SUSE-SR:2008:005
vupen
  • ADV-2008-0704
  • ADV-2008-2773
statements via4
contributor Mark J Cox
lastmodified 2008-10-17
organization Red Hat
statement The affected version of Wireshark as shipped in Red Hat Enterprise Linux 3, 4, and 5 were fixed via: https://rhn.redhat.com/errata/RHSA-2008-0890.html
Last major update 11-10-2018 - 20:29
Published 28-02-2008 - 22:44
Last modified 11-10-2018 - 20:29
Back to Top