Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:MISC:WSHARK-ENTTEC-BO |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Wireshark ENTTEC DMX Buffer Overflow |
Release Date |
2014/11/18 |
Update Number |
2441 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Wireshark ENTTEC DMX Buffer Overflow
This signature detects an attempt to exploit a known vulnerability against Wireshark tool while propcessing ENTTEC based payloads. Successful exploitation could allow an attacker to execute arbitrary codes into the context of the running application.
Extended Description
Wireshark is prone to a buffer-overflow vulnerability. Exploiting this issue may allow attackers to crash the application and deny service to legitimate users. Attackers may also execute arbitrary code in the context of vulnerable users running the application. Wireshark 1.4.2 is vulnerable; other versions may also be affected.
Affected Products
- Avaya aura_application_enablement_services 5.2
- Avaya aura_application_enablement_services 5.2.1
- Avaya aura_application_enablement_services 5.2.2
- Avaya aura_application_enablement_services 5.2.3
- Avaya aura_application_enablement_services 6.1
- Avaya aura_communication_manager 4.0
- Avaya aura_communication_manager 4.0
- Avaya aura_communication_manager 5.1
- Avaya aura_communication_manager 5.2
- Avaya aura_communication_manager 5.2.1
- Avaya aura_communication_manager 6.0
- Avaya aura_communication_manager 6.0.1
- Avaya aura_session_manager 1.1
- Avaya aura_session_manager 5.2
- Avaya aura_session_manager 5.2 SP1
- Avaya aura_session_manager 5.2 SP2
- Avaya aura_session_manager 6.0
- Avaya aura_session_manager 6.0 SP1
- Avaya aura_session_manager 6.1
- Avaya aura_session_manager 6.1 Sp1
- Avaya aura_sip_enablement_services 4.0
- Avaya aura_sip_enablement_services 5.0
- Avaya aura_sip_enablement_services 5.1
- Avaya aura_sip_enablement_services 5.2
- Avaya aura_sip_enablement_services 5.2.1
- Avaya aura_system_manager 6.0
- Avaya aura_system_manager 6.0 SP1
- Avaya aura_system_manager 6.1
- Avaya aura_system_manager 6.1.1
- Avaya aura_system_manager 6.1.2
- Avaya aura_system_manager 6.1.3
- Avaya aura_system_manager 6.1 Sp1
- Avaya aura_system_manager 6.1 SP2
- Avaya aura_system_platform 1.1
- Avaya aura_system_platform 6.0
- Avaya aura_system_platform 6.0.1
- Avaya aura_system_platform 6.0.2
- Avaya aura_system_platform 6.0 SP2
- Avaya aura_system_platform 6.0 SP3
- Avaya aura_system_platform SP1.1
- Avaya messaging_storage_server 4.0
- Avaya messaging_storage_server 5.0
- Avaya messaging_storage_server 5.1
- Avaya messaging_storage_server 5.1 SP1
- Avaya messaging_storage_server 5.1 SP2
- Avaya messaging_storage_server 5.2
- Avaya messaging_storage_server 5.2.2
- Avaya messaging_storage_server 5.2.8
- Avaya messaging_storage_server 5.2 SP1
- Avaya messaging_storage_server 5.2 SP2
- Avaya messaging_storage_server 5.2 SP3
- Avaya messaging_storage_server MSS 4.1
- Avaya messaging_storage_server MSS 5.1
- Debian linux 5.0
- Debian linux 5.0 Alpha
- Debian linux 5.0 Amd64
- Debian linux 5.0 Arm
- Debian linux 5.0 Armel
- Debian linux 5.0 Hppa
- Debian linux 5.0 Ia-32
- Debian linux 5.0 Ia-64
- Debian linux 5.0 M68k
- Debian linux 5.0 Mips
- Debian linux 5.0 Mipsel
- Debian linux 5.0 Powerpc
- Debian linux 5.0 S/390
- Debian linux 5.0 Sparc
- Mandriva corporate_server 4.0
- Mandriva corporate_server 4.0.0 X86 64
- Mandriva enterprise_server 5
- Mandriva enterprise_server 5 X86 64
- Mandriva linux_mandrake 2010.0
- Mandriva linux_mandrake 2010.0 X86 64
- Mandriva linux_mandrake 2010.1
- Mandriva linux_mandrake 2010.1 X86 64
- Red_hat enterprise_linux 5 Server
- Red_hat enterprise_linux Desktop Version 4
- Red_hat enterprise_linux_as 4
- Red_hat enterprise_linux_desktop 5 Client
- Red_hat enterprise_linux_desktop 6
- Red_hat enterprise_linux_desktop_optional 6
- Red_hat enterprise_linux_desktop_workstation 5 Client
- Red_hat enterprise_linux_es 4
- Red_hat enterprise_linux_server 6
- Red_hat enterprise_linux_server_optional 6
- Red_hat enterprise_linux_web_server 6
- Red_hat enterprise_linux_web_server_optional 6
- Red_hat enterprise_linux_workstation 6
- Red_hat enterprise_linux_workstation_optional 6
- Red_hat enterprise_linux_ws 4
- Red_hat fedora 13
- Red_hat fedora 14
- Sun solaris 11 Express
- Sun solaris 11 Express
- Suse opensuse 11.2
- Suse opensuse 11.3
- Suse opensuse 11.4
- Suse suse_linux_enterprise 10 SP3
- Suse suse_linux_enterprise 10 SP4
- Suse suse_linux_enterprise 11 SP1
- Wireshark wireshark 1.4.0
- Wireshark wireshark 1.4.1
- Wireshark wireshark 1.4.1
- Wireshark wireshark 1.4.2
References
- BugTraq: 45634
- CVE: CVE-2010-4538