5 - CVE-2007-6116

Executive Summary

Informations
Name	CVE-2007-6116	First vendor Publication	2007-11-23
Vendor	Cve	Last vendor Modification	2018-10-15

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6116

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:15036

Oval ID:	oval:org.mitre.oval:def:15036
Title:	Firebird/Interbase dissector vulnerability in Wireshark 0.99.6
Description:	The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2007-6116	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Wireshark
Definition Synopsis:
Wireshark is installed on the system. AND Version of Wireshark is 0.99.6

Definition Id: oval:org.mitre.oval:def:9799

Oval ID:	oval:org.mitre.oval:def:9799
Title:	The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.
Description:	The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-6116	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section wireshark is earlier than 0:0.99.7-1.el4 AND wireshark-gnome is earlier than 0:0.99.7-1.el4 AND libsmi is earlier than 0:0.4.5-2.el4 AND libsmi-devel is earlier than 0:0.4.5-2.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section wireshark is earlier than 0:0.99.7-1.el5 AND wireshark-gnome is earlier than 0:0.99.7-1.el5 AND libsmi is earlier than 0:0.4.5-2.el5 AND libsmi-devel is earlier than 0:0.4.5-2.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Wireshark cpe:2.3:a:wireshark:wireshark:0.99.6:::::::*	1

OpenVAS Exploits

Date	Description
2009-04-09	Name : Mandriva Update for wireshark MDVSA-2008:001-1 (wireshark) File : nvt/gb_mandriva_MDVSA_2008_001_1.nasl
2009-04-09	Name : Mandriva Update for wireshark MDVSA-2008:1 (wireshark) File : nvt/gb_mandriva_MDVSA_2008_1.nasl
2009-03-06	Name : RedHat Update for wireshark RHSA-2008:0058-01 File : nvt/gb_RHSA-2008_0058-01_wireshark.nasl
2009-02-27	Name : CentOS Update for libsmi CESA-2008:0058 centos4 i386 File : nvt/gb_CESA-2008_0058_libsmi_centos4_i386.nasl
2009-02-27	Name : CentOS Update for libsmi CESA-2008:0058 centos4 x86_64 File : nvt/gb_CESA-2008_0058_libsmi_centos4_x86_64.nasl
2009-02-27	Name : Fedora Update for wireshark FEDORA-2007-4590 File : nvt/gb_fedora_2007_4590_wireshark_fc8.nasl
2009-02-27	Name : Fedora Update for wireshark FEDORA-2007-4690 File : nvt/gb_fedora_2007_4690_wireshark_fc7.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200712-23 (wireshark) File : nvt/glsa_200712_23.nasl
2008-09-04	Name : wireshark -- multiple vulnerabilities File : nvt/freebsd_wireshark0.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
40454	Wireshark Firebird/Interbase Dissector Unspecified Infinite Loop Remote DoS

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0058.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080121_wireshark_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0058.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-001.nasl - Type : ACT_GATHER_INFO
2008-01-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0058.nasl - Type : ACT_GATHER_INFO
2008-01-04	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1446.nasl - Type : ACT_GATHER_INFO
2007-12-31	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200712-23.nasl - Type : ACT_GATHER_INFO
2007-12-24	Name : The remote Fedora host is missing a security update. File : fedora_2007-4590.nasl - Type : ACT_GATHER_INFO
2007-12-24	Name : The remote Fedora host is missing a security update. File : fedora_2007-4690.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/26532
BUGTRAQ	http://www.securityfocus.com/archive/1/485792/100/0/threaded
CONFIRM	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 http://www.wireshark.org/security/wnpa-sec-2007-03.html https://issues.rpath.com/browse/RPL-1975
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2007-December/msg0060... https://www.redhat.com/archives/fedora-package-announce/2007-December/msg0071...
GENTOO	http://security.gentoo.org/glsa/glsa-200712-23.xml
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 http://www.mandriva.com/security/advisories?name=MDVSA-2008:1
MISC	http://bugs.gentoo.org/show_bug.cgi?id=199958
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova... https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2008-0058.html
SECTRACK	http://securitytracker.com/id?1018988
SECUNIA	http://secunia.com/advisories/27777 http://secunia.com/advisories/28197 http://secunia.com/advisories/28207 http://secunia.com/advisories/28288 http://secunia.com/advisories/28304 http://secunia.com/advisories/28325 http://secunia.com/advisories/28564 http://secunia.com/advisories/29048
SUSE	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
VUPEN	http://www.vupen.com/english/advisories/2007/3956

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:06:42	Multiple Updates
2021-04-22 01:07:12	Multiple Updates
2020-05-23 00:20:49	Multiple Updates
2018-10-16 00:19:20	Multiple Updates
2017-09-29 09:23:17	Multiple Updates
2016-04-26 16:50:14	Multiple Updates
2014-02-17 10:42:42	Multiple Updates
2013-05-11 10:42:54	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	2
CPE ID(s)	1
Sources(s)	25
osvdb(s)	1
Openvas Exploit(s)	9
Nessus® Exploit(s)	9

	Related
10	RHSA-2008:0058
10	MDVSA-2008:001-1
10	GLSA-200712-23
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 3 more Alert(s)

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0575s

Facebook rss twitter linkedin mail