NVD Vulnerability Detail

CVE-2011-3360

Summary	Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
Publication Date	Sept. 20, 2011, 7:55 p.m.
Registration Date	Jan. 28, 2021, 4:39 p.m.
Last Update	Nov. 21, 2024, 10:30 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://osvdb.org/75347
2	http://www.debian.org/security/2011/dsa-2324
3	http://www.mandriva.com/security/advisories?name=MDVSA-2011:138
4	http://www.openwall.com/lists/oss-security/2011/09/13/1
5	http://www.openwall.com/lists/oss-security/2011/09/14/5
6	http://www.wireshark.org/security/wnpa-sec-2011-15.html	Vendor Advisory
7	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6136
8	https://bugzilla.redhat.com/show_bug.cgi?id=737784
9	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15059
10	http://osvdb.org/75347
11	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15059
12	https://bugzilla.redhat.com/show_bug.cgi?id=737784
13	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6136
14	http://www.wireshark.org/security/wnpa-sec-2011-15.html	Vendor Advisory
15	http://www.openwall.com/lists/oss-security/2011/09/14/5
16	http://www.openwall.com/lists/oss-security/2011/09/13/1
17	http://www.mandriva.com/security/advisories?name=MDVSA-2011:138
18	http://www.debian.org/security/2011/dsa-2324

Common Vulnerabilities List

JVN Vulnerability Information

Wireshark における権限を取得される脆弱性

Title	Wireshark における権限を取得される脆弱性
Summary	Wireshark には、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。
Possible impacts	ローカルユーザにより、不特定のディレクトリ内にあるトロイの木馬の Lua スクリプトを介して、権限を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 7, 2011, midnight
Registration Date	Nov. 8, 2011, 2:18 p.m.
Last Update	Nov. 8, 2011, 2:18 p.m.

Affected System

Wireshark

Wireshark 1.6.2 未満の 1.6.x

Wireshark 1.4.9 未満の 1.4.x

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-3360	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3360
National Vulnerability Database (NVD)
2	CVE-2011-3360	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3360

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Wireshark Bug Database
1	6136	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6136
Wireshark Security Advisories
2	wnpa-sec-2011-15	http://www.wireshark.org/security/wnpa-sec-2011-15.html

Change Log

No	Changed Details	Date of change
0	[2011年11月08日] 掲載	Feb. 17, 2018, 10:37 a.m.