Debian DSA-2324-1 : wireshark - programming error

The Microsoft Vulnerability Research group discovered that insecure load path handling could lead to execution of arbitrary Lua script code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

[SECURITY] [DSA 2324-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2324-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2011 http://www.debian.org/security/faq -...

Wireshark Lua Script File Arbitrary Code Execution Vulnerability (Windows)

This host is installed with Wireshark and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkluascriptcodeexecvulnwin.nasl 7052 2017-09-04 11:50:51Z teissa $ Wireshark Lua Script File Arbitrary Code Execution Vulnerability Windows Authors: Sooraj KS Copyright:...

DEBIAN-CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...

CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...

CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...

CVE-2011-3360

Wireshark flats: CVE-2011-3360 affects Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2. Root cause is insecure load/search path handling that can cause execution of an untrusted Lua script (Trojan horse) from an unspecified directory, enabling local privilege escalation. Public advisories con...

CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...

CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...

Wireshark console.lua Pre-Loading Script Execution

This module exploits a vulnerability in Wireshark 1.6 or less. When opening a pcap file, Wireshark will actually check if there's a 'console.lua' file in the same directory, and then parse/execute the script if found. Versions affected by this vulnerability: 1.6.0 to 1.6.1, 1.4.0 to 1.4.8 Module...