CVE-2011-3360

Related Files

Wireshark 1.6 console.lua Pre-Load / Execution

Posted Nov 20, 2011

Authored by sinn3r | Site metasploit.com

This Metasploit modules exploits a vulnerability in Wireshark 1.6 or less. When opening a pcap file, Wireshark will actually check if there's a 'console.lua' file in the same directory, and then parse/execute the script if found. Versions affected by this vulnerability: 1.6.0 to 1.6.1, 1.4.0 to 1.4.8

tags | exploit

advisories | CVE-2011-3360, OSVDB-75347

SHA-256 | c7b86f510e7897dd9923514fbd475d9ec025e6ea543ad22525475f3d82ace5ef

Download | Favorite | View

Debian Security Advisory 2324-1

Posted Oct 20, 2011

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2324-1 - The Microsoft Vulnerability Research group discovered that insecure load path handling could lead to execution of arbitrary Lua script code.

tags | advisory, arbitrary

systems | linux, debian

advisories | CVE-2011-3360

SHA-256 | 9829b33336676c8fda20a44bf2bf4221d9194c7f95427d3ce90e35f02d3cf6af

Download | Favorite | View

Mandriva Linux Security Advisory 2011-138

Posted Sep 28, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-138 - This advisory updates wireshark to the latest version (1.6.2), fixing several security issues. Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory. The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service via a malformed packet. Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service via a malformed capture file that leads to an invalid root tvbuff, related to a buffer exception handling vulnerability. The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size, which allows remote attackers to cause a denial of service via a malformed packet. The updated packages have been upgraded to the latest 1.6.x version which is not vulnerable to these issues.

tags | advisory, remote, denial of service, local, root, trojan

systems | linux, mandriva

advisories | CVE-2011-3360, CVE-2011-3482, CVE-2011-3483, CVE-2011-3484

SHA-256 | 1be2ff4344b88429c4b45236683821e4090a102fcfdcdb92236828617d266698

Download | Favorite | View