Wireshark LWRES Dissector getaddrsbyname_request Buffer Overflow

Exploit for unknown platform in category remote exploits ======================================================================= Wireshark LWRES Dissector getaddrsbynamerequest Buffer Overflow loop ======================================================================= $Id:...

FreeBSD Ports: wireshark, wireshark-lite

The remote host is missing an update to the system as announced in the referenced advisory. VID bb0a8795-15dc-11df-bf0a-002170daae37 OpenVAS Vulnerability Test $ Description: Auto generated from VID bb0a8795-15dc-11df-bf0a-002170daae37 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

CVE-2010-0304

Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service crash via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissectgetaddrsbynamerequest function...

CVE-2010-0304

The CVE-2010-0304 entry describes multiple stack-based buffer overflows in the Wireshark LWRES dissector, specifically in the dissect_getaddrsbyname_request function. Affected Wireshark versions are 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5, enabling remote attackers to crash the analyzer (de...

[SECURITY] [DSA 1983-1] New Wireshark packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1983-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 30, 2010 http://www.debian.org/security/faq -...

CVE-2010-0304

creationtimestamp| type| source ---|---|--- 2010-01-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11288 2010-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16289 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16292 2018-05-29...

Wireshark / Ethereal Dissector LWRES Multiple Buffer Overflows

The installed version of Wireshark or Ethereal is potentially vulnerable to attack by handling data associated with the LWRES dissector. These vulnerabilities can result in a denial of service, or possibly arbitrary code execution. A remote attacker can exploit these issues by tricking a user int...

Mandriva Update for mozilla-thunderbird MDVSA-2008:062 (mozilla-thunderbird)

Check for the Version of mozilla-thunderbird OpenVAS Vulnerability Test Mandriva Update for mozilla-thunderbird MDVSA-2008:062 mozilla-thunderbird Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Ubuntu Update for mozilla-thunderbird USN-582-2

Ubuntu Update for Linux kernel vulnerabilities USN-582-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5822.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mozilla-thunderbird USN-582-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-582-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for thunderbird RHSA-2008:0105-02

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2008:0105-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CVE-2009-0304

The CVE-2009-0304 issue affects Sun Solaris 10/11 snv_101b and OpenSolaris before snv_108, where the kernel improperly handles IPv6 packets via SunOSipv6.c, allowing remote attackers to cause a denial of service (system crash). The root cause is insufficient validation in IPv6 packet processing. ...

CVE-2009-0304

creationtimestamp| type| source ---|---|--- 2009-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7865...

Solaris 10 (sparc) : 138888-08

SunOS 5.10: Kernel Patch. Date this patch was last updated by Sun : Apr/01/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (x86) : 138889-08

SunOS 5.10x86: Kernel Patch. Date this patch was last updated by Sun : Apr/01/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Debian DSA-1621-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0304 It was discovered that a buffer overflow in MIME decoding can lead t...

[SECURITY] [DSA 1621-1] New icedove packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1621-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 27, 2008 http://www.debian.org/security/faq -...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : mozilla-thunderbird, thunderbird vulnerabilities (USN-582-1)

It was discovered that Thunderbird did not properly set the size of a buffer when parsing an external-body MIME-type. If a user were to open a specially crafted email, an attacker could cause a denial of service via application crash or possibly execute arbitrary code as the user. CVE-2008-0304...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. Here are the details from the Slackware 12.0 ChangeLog: patches/packages/mozilla-thunderbird-2.0.0.12-i686-1.tgz: Upgraded to thunderbird-2.0.0.12. This update fixes the following...

CVE-2008-0304

CVE-2008-0304 is a heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8, allowing remote code execution via a crafted external-body MIME type in an email. The root cause is an incorrect memory allocation during message preview, enabling an attacker to run a...