CVE-2008-5285

Published: Dec 1, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop.

Affected (41)

Products: Wireshark: Wireshark

1 product

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Up to 1.0.4
Wireshark Wireshark	Version 0.10.10
Wireshark Wireshark	Version 0.10.11
Wireshark Wireshark	Version 0.10.12
Wireshark Wireshark	Version 0.10.13
Wireshark Wireshark	Version 0.10.14
Wireshark Wireshark	Version 0.10.1
Wireshark Wireshark	Version 0.10.2
Wireshark Wireshark	Version 0.10.3
Wireshark Wireshark	Version 0.10.4
Wireshark Wireshark	Version 0.10.5
Wireshark Wireshark	Version 0.10.6
Wireshark Wireshark	Version 0.10.7
Wireshark Wireshark	Version 0.10.8
Wireshark Wireshark	Version 0.10.9
Wireshark Wireshark	Version 0.10
Wireshark Wireshark	Version 0.6
Wireshark Wireshark	Version 0.7.9
Wireshark Wireshark	Version 0.8.16
Wireshark Wireshark	Version 0.8.19
Wireshark Wireshark	Version 0.9.10
Wireshark Wireshark	Version 0.9.14
Wireshark Wireshark	Version 0.9.5
Wireshark Wireshark	Version 0.9.7
Wireshark Wireshark	Version 0.9.8
Wireshark Wireshark	Version 0.99.0
Wireshark Wireshark	Version 0.99.1
Wireshark Wireshark	Version 0.99.2
Wireshark Wireshark	Version 0.99.3
Wireshark Wireshark	Version 0.99.4
Wireshark Wireshark	Version 0.99.5
Wireshark Wireshark	Version 0.99.6
Wireshark Wireshark	Version 0.99.6a
Wireshark Wireshark	Version 0.99.7
Wireshark Wireshark	Version 0.99.8
Wireshark Wireshark	Version 0.99
Wireshark Wireshark	Version 1.0.0
Wireshark Wireshark	Version 1.0.1
Wireshark Wireshark	Version 1.0.2
Wireshark Wireshark	Version 1.0.3
Wireshark Wireshark	Version 1.0

Related CWEs

References (34)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065840.html

Source: cve@mitre.org

http://secunia.com/advisories/32840

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/34144

Source: cve@mitre.org

http://securityreason.com/securityalert/4663

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm

Source: cve@mitre.org

http://wiki.rpath.com/Advisories:rPSA-2008-0336

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:242

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/11/24/1

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0313.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/498562/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/499154/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/32422

Source: cve@mitre.org

http://www.securitytracker.com/id?1021275

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3231

Source: cve@mitre.org

http://www.wireshark.org/security/wnpa-sec-2008-07.html

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=472737

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11351

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065840.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32840

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/34144

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/4663

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/Advisories:rPSA-2008-0336

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:242

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2008/11/24/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-0313.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/498562/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/499154/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32422

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021275

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3231

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2008-07.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=472737

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11351

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.