Executive Summary

Informations
NameCVE-2007-6121First vendor Publication2007-11-23
VendorCveLast vendor Modification2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score5Attack RangeNetwork
Cvss Impact Score2.9Attack ComplexityLow
Cvss Expoit Score10AuthentificationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6121

CWE : Common Weakness Enumeration

idName
CWE-20Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11374
 
Oval ID: oval:org.mitre.oval:def:11374
Title: Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.
Description: Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.
Family: unix Class: vulnerability
Reference(s): CVE-2007-6121
Version: 5
Platform(s): Red Hat Enterprise Linux 3
CentOS Linux 3
Red Hat Enterprise Linux 4
CentOS Linux 4
Oracle Linux 4
Red Hat Enterprise Linux 5
CentOS Linux 5
Oracle Linux 5
Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application42
Application11

Open Source Vulnerability Database (OSVDB)

idDescription
40451Wireshark Malformed RPC Portmap Packet Handling Remote DoS

Internal Sources (Detail)

SourceUrl
BIDhttp://www.securityfocus.com/bid/26532
BUGTRAQhttp://www.securityfocus.com/archive/1/archive/1/485792/100/0/threaded
CONFIRMhttp://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004
http://www.wireshark.org/security/wnpa-sec-2007-03.html
https://issues.rpath.com/browse/RPL-1975
DEBIANhttp://www.debian.org/security/2007/dsa-1414
FEDORAhttps://www.redhat.com/archives/fedora-package-announce/2007-December/msg0060...
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg0071...
GENTOOhttp://security.gentoo.org/glsa/glsa-200712-23.xml
MANDRIVAhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:001
http://www.mandriva.com/security/advisories?name=MDVSA-2008:1
MISChttp://bugs.gentoo.org/show_bug.cgi?id=199958
REDHAThttp://www.redhat.com/support/errata/RHSA-2008-0058.html
http://www.redhat.com/support/errata/RHSA-2008-0059.html
SECTRACKhttp://securitytracker.com/id?1018988
SECUNIAhttp://secunia.com/advisories/27777
http://secunia.com/advisories/27817
http://secunia.com/advisories/28197
http://secunia.com/advisories/28207
http://secunia.com/advisories/28288
http://secunia.com/advisories/28304
http://secunia.com/advisories/28325
http://secunia.com/advisories/28564
http://secunia.com/advisories/28583
http://secunia.com/advisories/29048
SUSEhttp://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
VUPENhttp://www.vupen.com/english/advisories/2007/3956

Alert History

If you want to see full details history, please login or register.
0
DateInformations
2013-05-11 10:42:56
  • Multiple Updates