CVE-2011-3360
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows...
9.3 HighPublic exploitFix available
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
Exploit likelihood
34.5%Down 8.8 points since Feb 4, 2022
What each source reports
NVD Score used
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
- Record
CVE-2011-3360- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
- Record
CVE-2011-3360- Updated
- 2026-11-02
EUVDEUVD-2011-3324 No score
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
- Record
EUVD-2011-3324- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6c9g-wrqp-q548 No score
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows...
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
- Record
GHSA-6c9g-wrqp-q548- Updated
- 2026-11-02
OSV No score
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
- Record
CVE-2011-3360- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-3360 No score
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
- Record
DEBIAN-CVE-2011-3360- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10199-1 No score
wireshark-2.2.2-1.1 on GA media
These are all security issues fixed in the wireshark-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10199-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 1.6.2-1 | 1.6.2-1 |
wiresharkDebian:13 |
before 1.6.2-1 | 1.6.2-1 |
wiresharkDebian:14 |
before 1.6.2-1 | 1.6.2-1 |
wiresharkDebian:6.0 |
before 1.2.11-6+squeeze4, plus listed versions 1.2.11-61.2.11-6+squeeze11.2.11-6+squeeze2 |
1.2.11-6+squeeze4 |
wiresharkDebian:5.0 |
before 1.0.2-3+lenny15, plus listed versions 1.0.2-3+lenny101.0.2-3+lenny111.0.2-3+lenny121.0.2-3+lenny131.0.2-3+lenny14 Show 7 moreShow less1.0.2-3+lenny31.0.2-3+lenny41.0.2-3+lenny51.0.2-3+lenny61.0.2-3+lenny71.0.2-3+lenny81.0.2-3+lenny9 |
1.0.2-3+lenny15 |
wiresharkopenSUSE:Tumbleweed |
before 2.2.2-1.1 | 2.2.2-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Wireshark - console.lua pre-loading (Metasploit) | 2011-11-19 |
| Metasploit | Wireshark console.lua Pre-Loading Script Execution | 2011-07-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3360 is a high vulnerability (CVSS 9.3) in Wireshark, published September 20, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 34.5%, the 98th percentile. Fixed in wireshark 1.6.2-1.
References
debian.org/security/2011/dsa-2324
openwall.com/lists/oss-security/2011/09/14/5
bugzilla.redhat.com/show_bug.cgi?id=737784
osvdb.org/75347
mandriva.com/security/advisories?name=MDVSA-2011:138
wireshark.org/security/wnpa-sec-2011-15.html
Show 194 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15059
bugs.wireshark.org/bugzilla/show_bug.cgi?id=6136
nvd.nist.gov/vuln/detail/CVE-2011-3360
github.com/advisories/GHSA-6c9g-wrqp-q548
security-tracker.debian.org/tracker/CVE-2011-3360
suse.com/security/cve/CVE-2009-1210
This page doesn't list everything
Left out here: 74 references. The JSON record has them.