CVE-2009-0601

2009-02-1600:00:00

ubuntu.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.001

Percentile

18.0%

JSON

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on
non-Windows platforms allows local users to cause a denial of service
(application crash) via format string specifiers in the HOME environment
variable.

OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu9.10noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu10.04noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu10.10noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu11.04noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu11.10noarchwireshark< 1.0.6-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.04	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	9.10	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	10.04	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	10.10	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	11.04	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	11.10	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN