CVE-2007-6114

wireshark SSL and OS/400 trace flaws

Published Nov 23, 2007 CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Description
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1414-1 New wireshark packages fix several vulnerabilities
EUVD EUVD EUVD-2007-6083 Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
References
Link Providers
http://bugs.gentoo.org/show_bug.cgi?id=199958 cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html cve-icon cve-icon
http://secunia.com/advisories/27777 cve-icon cve-icon
http://secunia.com/advisories/27817 cve-icon cve-icon
http://secunia.com/advisories/28197 cve-icon cve-icon
http://secunia.com/advisories/28207 cve-icon cve-icon
http://secunia.com/advisories/28288 cve-icon cve-icon
http://secunia.com/advisories/28304 cve-icon cve-icon
http://secunia.com/advisories/28325 cve-icon cve-icon
http://secunia.com/advisories/28564 cve-icon cve-icon
http://secunia.com/advisories/28583 cve-icon cve-icon
http://secunia.com/advisories/29048 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200712-23.xml cve-icon cve-icon
http://securitytracker.com/id?1018988 cve-icon cve-icon
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1414 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0058.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0059.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/485792/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/26532 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3956 cve-icon cve-icon
http://www.wireshark.org/security/wnpa-sec-2007-03.html cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1975 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-6114 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10708 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-6114 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 3:54 PM
Reserved
Nov 23, 2007, 12:00 AM
Status
Modified
Published
Nov 23, 2007, 8:46 PM
Modified
Jun 16, 2026, 10:47 PM
Severity
Moderate
Public date
Nov 22, 2007, 12:00 AM