Users of Wireshark 1.4.0 please be advised of a Malformed SNMP V1 Packet Denial of Service vulnerability that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)
Amplify’d from www.criticalwatch.com
Wireshark-SA-09/13/2010: Wireshark 1.4.0 Malformed SNMP V1 Packet Denial of Service
Description
Wireshark makes use of protocol dissectors to parse packet data and organize its contents into a meaningful representation. Upon encountering an SNMP v1 packet, the ASN.1/BER dissector, as implemented in $SRC_ROOT/epan/dissectors/packet-ber.c, will be invoked to process the BER encoded content, i.e. variable bindings in the SNMP PDU. If this field is filled with an extremely long string, e.g. a sequence of 14000 'A's, a recursive call in function dissect_unknown_ber() would consume too much stack space, causing stack overflow in most configurations and later a null pointer deference in the exception handling code.
Read more at www.criticalwatch.com
See this Amp at http://bit.ly/batSH8
No comments:
Post a Comment