Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Wireshark 安全漏洞
Vulnerability Description
Wireshark（前称Ethereal）是Wireshark团队开发的一套网络数据包分析软件。该软件的功能是截取网络数据包，并显示出详细的数据以供分析。 Wireshark 2.6.2及之前版本中存在安全漏洞，该漏洞源于wsutil/file_util.c文件中的‘create_app_running_mutex’函数通过调用‘SetSecurityDescriptorDacl’函数来设置一个NULL DACL。攻击者可利用该漏洞任意修改访问控制。
CVSS Information
N/A
Vulnerability Type
N/A