CVE-2009-0599

Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.

• CWE-119

• http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
• http://osvdb.org/51815
• http://secunia.com/advisories/33872Vendor Advisory
• http://secunia.com/advisories/34144
• http://secunia.com/advisories/34264
• http://secunia.com/advisories/34344
• http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm
• http://wiki.rpath.com/Advisories:rPSA-2009-0040
• http://www.redhat.com/support/errata/RHSA-2009-0313.html
• http://www.securityfocus.com/archive/1/501763/100/0/threaded
• http://www.securityfocus.com/bid/33690Patch
• http://www.securitytracker.com/id?1021697
• http://www.vupen.com/english/advisories/2009/0370
• http://www.wireshark.org/security/wnpa-sec-2009-01.htmlVendor Advisory
• https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2590Exploit, Vendor Advisory
• https://issues.rpath.com/browse/RPL-2984
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14732
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9677
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html
• http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
• http://osvdb.org/51815
• http://secunia.com/advisories/33872Vendor Advisory
• http://secunia.com/advisories/34144
• http://secunia.com/advisories/34264
• http://secunia.com/advisories/34344
• http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm
• http://wiki.rpath.com/Advisories:rPSA-2009-0040
• http://www.redhat.com/support/errata/RHSA-2009-0313.html
• http://www.securityfocus.com/archive/1/501763/100/0/threaded
• http://www.securityfocus.com/bid/33690Patch
• http://www.securitytracker.com/id?1021697
• http://www.vupen.com/english/advisories/2009/0370
• http://www.wireshark.org/security/wnpa-sec-2009-01.htmlVendor Advisory
• https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2590Exploit, Vendor Advisory
• https://issues.rpath.com/browse/RPL-2984
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14732
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9677
• https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html

Published

Feb 16, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0593SQL injection vulnerability in members.php in plx Auto Remin…
• CVE-2009-0594Cross-site scripting (XSS) vulnerability in index.php in php…
• CVE-2009-0595PHP remote file inclusion vulnerability in skysilver/login.t…
• CVE-2009-0596Directory traversal vulnerability in skysilver/login.tpl.php…
• CVE-2009-0597SQL injection vulnerability in admin/index.php in w3b>cms (a…
• CVE-2009-0598SQL injection vulnerability in index.php in PhpMesFilms 1.0 …
• CVE-2009-0600Wireshark 0.99.6 through 1.0.5 allows user-assisted remote a…
• CVE-2009-0601Format string vulnerability in Wireshark 0.99.8 through 1.0.…
• CVE-2009-0602Unrestricted file upload vulnerability in upload.php in Wikk…
• CVE-2009-0603Cross-site scripting (XSS) vulnerability in index.php in the…
• CVE-2009-0604SQL injection vulnerability in index.php in PHP Director 0.2…
• CVE-2009-0605Stack consumption vulnerability in the do_page_fault functio…