CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
wiresharkwireshark
1.4.0
wiresharkwireshark
1.4.1
wiresharkwireshark
1.4.2
wiresharkwireshark
1.4.3
wiresharkwireshark
1.4.4
wiresharkwireshark
1.4.5
wiresharkwireshark
1.4.6
wiresharkwireshark
1.4.7
wiresharkwireshark
1.4.8
wiresharkwireshark
1.6.0
wiresharkwireshark
1.6.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wireshark
bookworm
4.0.11-1~deb12u1
fixed
bookworm (security)
4.0.11-1~deb12u1
fixed
bullseye
3.4.10-0+deb11u1
fixed
bullseye (security)
3.4.16-0+deb11u1
fixed
sid
4.4.1-1
fixed
trixie
4.4.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
hardy
ignored
lucid
ignored
maverick
Fixed 1.2.11-6+squeeze4build0.10.10.1
released
natty
ignored
oneiric
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected
saucy
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libwireshark9
suse enterprise desktop 15
2.4.6-1.31
fixed
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise sap 15
2.4.6-1.31
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 15
2.4.6-1.31
fixed
libwiretap7
suse enterprise desktop 15
2.4.6-1.31
fixed
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise sap 15
2.4.6-1.31
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 15
2.4.6-1.31
fixed
libwscodecs1
suse enterprise desktop 15
2.4.6-1.31
fixed
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise sap 15
2.4.6-1.31
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 15
2.4.6-1.31
fixed
libwsutil8
suse enterprise desktop 15
2.4.6-1.31
fixed
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise sap 15
2.4.6-1.31
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 15
2.4.6-1.31
fixed
wireshark
suse enterprise desktop 15
2.4.6-1.31
fixed
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise sap 15
2.4.6-1.31
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 15
2.4.6-1.31
fixed
wireshark-devel
suse enterprise desktop 15
2.4.6-1.31
fixed
suse enterprise sap 15
2.4.6-1.31
fixed
suse enterprise server 15
2.4.6-1.31
fixed
wireshark-gtk
suse enterprise sap 12 SP5
2.4.16-48.51.1
fixed
suse enterprise server 12 SP5
2.4.16-48.51.1
fixed
wireshark-ui-qt
suse enterprise desktop 15
2.4.6-1.31
fixed
suse enterprise sap 15
2.4.6-1.31
fixed
suse enterprise server 15
2.4.6-1.31
fixed
References
http://osvdb.org/75347
http://www.debian.org/security/2011/dsa-2324
http://www.mandriva.com/security/advisories?name=MDVSA-2011:138
http://www.openwall.com/lists/oss-security/2011/09/13/1
http://www.openwall.com/lists/oss-security/2011/09/14/5
http://www.wireshark.org/security/wnpa-sec-2011-15.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6136
https://bugzilla.redhat.com/show_bug.cgi?id=737784
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15059
http://osvdb.org/75347
http://www.debian.org/security/2011/dsa-2324
http://www.mandriva.com/security/advisories?name=MDVSA-2011:138
http://www.openwall.com/lists/oss-security/2011/09/13/1
http://www.openwall.com/lists/oss-security/2011/09/14/5
http://www.wireshark.org/security/wnpa-sec-2011-15.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6136
https://bugzilla.redhat.com/show_bug.cgi?id=737784
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15059