CVE-2009-0601

2009-02-1600:00:00

ubuntu.com

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

16.9%

JSON

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on
non-Windows platforms allows local users to cause a denial of service
(application crash) via format string specifiers in the HOME environment
variable.

OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu9.10noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu10.04noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu10.10noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu11.04noarchwireshark< 1.0.6-1ubuntu1UNKNOWN
ubuntu11.10noarchwireshark< 1.0.6-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.04	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	9.10	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	10.04	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	10.10	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	11.04	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN
ubuntu	11.10	noarch	wireshark	< 1.0.6-1ubuntu1	UNKNOWN