Vulnerabilities > CVE-2008-3140 - Multiple vulnerability in Wireshark 1.0.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Wireshark 1.0.0 syslog Dissector Unspecified DoS. CVE-2008-3140. Dos exploits for multiple platform |
| id | EDB-ID:32006 |
| last seen | 2016-02-03 |
| modified | 2008-06-30 |
| published | 2008-06-30 |
| reporter | Noam Rathus |
| source | https://www.exploit-db.com/download/32006/ |
| title | Wireshark 1.0.0 - Multiple DoS |
Nessus
NASL family SuSE Local Security Checks NASL id SUSE9_12225.NASL description Various vulnerabilities have been fixed in ethereal: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. last seen 2020-06-01 modified 2020-06-02 plugin id 41234 published 2009-09-24 reporter This script is Copyright (C) 2009-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/41234 title SuSE9 Security Update : ethereal (YOU Patch Number 12225) NASL family SuSE Local Security Checks NASL id SUSE_ETHEREAL-5520.NASL description Various vulnerabilities have been fixed in wireshark: CVE-2008-3137 / CVE-2008-3138 / CVE-2008-3139 / CVE-2008-3140 / CVE-2008-3141 / CVE-2008-3145 / CVE-2008-3146. last seen 2020-06-01 modified 2020-06-02 plugin id 34046 published 2008-08-26 reporter This script is Copyright (C) 2008-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/34046 title SuSE 10 Security Update : ethereal (ZYPP Patch Number 5520) NASL family Fedora Local Security Checks NASL id FEDORA_2008-6645.NASL description Upgrade to upstream 1.0.2 that fixes several security vulnerabilities: http://www.wireshark.org/security/wnpa-sec-2008-03.html http://www.wireshark.org/security/wnpa-sec-2008-04.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 33553 published 2008-07-23 reporter This script is Copyright (C) 2008-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/33553 title Fedora 8 : wireshark-1.0.2-1.fc8 (2008-6645) NASL family Fedora Local Security Checks NASL id FEDORA_2008-6440.NASL description Upgrade to upstream 1.0.2 that fixes several security vulnerabilities: http://www.wireshark.org/security/wnpa-sec-2008-03.html http://www.wireshark.org/security/wnpa-sec-2008-04.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 33521 published 2008-07-16 reporter This script is Copyright (C) 2008-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/33521 title Fedora 9 : wireshark-1.0.2-1.fc9 (2008-6440) NASL family SuSE Local Security Checks NASL id SUSE_11_0_WIRESHARK-080814.NASL description Various vulnerabilities have been fixed in wireshark: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. last seen 2020-06-01 modified 2020-06-02 plugin id 40151 published 2009-07-21 reporter This script is Copyright (C) 2009-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/40151 title openSUSE Security Update : wireshark (wireshark-149) NASL family Mandriva Local Security Checks NASL id MANDRIVA_MDVSA-2008-152.NASL description A number of vulnerabilities were discovered in Wireshark that could cause it to crash while processing malicious packets (CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145). This update provides Wireshark 1.0.2, which is not vulnerable to these issues. last seen 2020-06-01 modified 2020-06-02 plugin id 36557 published 2009-04-23 reporter This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/36557 title Mandriva Linux Security Advisory : wireshark (MDVSA-2008:152) NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-200808-04.NASL description The remote host is affected by the vulnerability described in GLSA-200808-04 (Wireshark: Denial of Service) Multiple vulnerabilities related to memory management were discovered in the GSM SMS dissector (CVE-2008-3137), the PANA and KISMET dissectors (CVE-2008-3138), the RTMPT dissector (CVE-2008-3139), the syslog dissector (CVE-2008-3140) and the RMI dissector (CVE-2008-3141) and when reassembling fragmented packets (CVE-2008-3145). Impact : A remote attacker could exploit these vulnerabilities by sending a specially crafted packet on a network being monitored by Wireshark or enticing a user to read a malformed packet trace file, causing a Denial of Service. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 33834 published 2008-08-07 reporter This script is Copyright (C) 2008-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/33834 title GLSA-200808-04 : Wireshark: Denial of Service NASL family SuSE Local Security Checks NASL id SUSE_WIRESHARK-5515.NASL description Various vulnerabilities have been fixed in wireshark: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. last seen 2020-06-01 modified 2020-06-02 plugin id 34047 published 2008-08-26 reporter This script is Copyright (C) 2008-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/34047 title openSUSE 10 Security Update : wireshark (wireshark-5515)
Oval
| accepted | 2013-08-19T04:00:28.912-04:00 | ||||||||||||
| class | vulnerability | ||||||||||||
| contributors |
| ||||||||||||
| definition_extensions |
| ||||||||||||
| description | The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet." | ||||||||||||
| family | windows | ||||||||||||
| id | oval:org.mitre.oval:def:14700 | ||||||||||||
| status | accepted | ||||||||||||
| submitted | 2012-02-27T15:34:33.178-04:00 | ||||||||||||
| title | syslog dissector vulnerability in Wireshark 1.0.0 | ||||||||||||
| version | 8 |
Statements
| contributor | Tomas Hoger |
| lastmodified | 2008-07-11 |
| organization | Red Hat |
| statement | Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5 |
References
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
- http://secunia.com/advisories/30886
- http://secunia.com/advisories/30942
- http://secunia.com/advisories/31085
- http://secunia.com/advisories/31378
- http://secunia.com/advisories/31687
- http://security.gentoo.org/glsa/glsa-200808-04.xml
- http://securitytracker.com/id?1020404
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212
- http://www.securityfocus.com/archive/1/493882/100/0/threaded
- http://www.securityfocus.com/bid/30020
- http://www.vupen.com/english/advisories/2008/1982/references
- http://www.wireshark.org/security/wnpa-sec-2008-03.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43518
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14700
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html