CentOS 3 / 4 : wireshark (CESA-2007:0066)

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Several denial of...

Wireshark多个协议拒绝服务漏洞

Wireshark是一款功能强大的协议分析程序。 Wireshark存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 CVE-2007-0459：TCP解析器在重组HTTP包时存在问题可导致应用程序挂起或者崩溃。 CVE-2007-0458：HTTP解析器存在安全问题可导致应用程序崩溃。 CVE-2007-0457：在部分系统上IEEE 802.11解析器存在安全问题可导致应用程序崩溃。 CVE-2007-0456：在部分系统上LLT解析器存在安全问题可导致应用程序崩溃。 Wireshark Wireshark 0.99.4 Wireshark Wireshark...

CVE-2007-0458

Unspecified vulnerability in the HTTP dissector in Wireshark formerly Ethereal 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service application crash via unspecified vectors, a different issue than CVE-2006-5468...

CVE-2007-0458

CVE-2007-0458 affects Wireshark (formerly Ethereal) in versions 0.99.3 and 0.99.4. The vulnerability is in the HTTP dissector and can cause the application to crash (remote denial of service) via unspecified vectors. This is documented across multiple disclosures and advisories associated with Wi...

Wireshark: wnpa-sec-2007-01

Summary Name: Multiple problems in Wireshark formerly Ethereal® versions 0.10.14 to 0.99.4 Docid: wnpa-sec-2007-01 Date: February 1, 2007 Versions affected: 0.10.14 up to and including 0.99.4 Details Description Wireshark 0.99.5 fixes the following vulnerabilities: The TCP dissector could hang or...

CVE-2006-0458

The CVE-2006-0458 issue affects irssi’s DCC ACCEPT handler. Affected: irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 (Ubuntu and possibly other distros). Description: remote attackers can cause a denial of service (application crash) by sending crafted DCC arguments. Impact: crash of the irssi process u...

CVE-2006-0458

The DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and possibly other distributions, allows remote attackers to cause a denial of service application crash via certain crafted arguments in a DCC command...

[USN-259-1] irssi vulnerability

=========================================================== Ubuntu Security Notice USN-259-1 March 01, 2006 irssi-text vulnerability CVE-2006-0458 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Breezy Badger The...

CVE-2005-0458

CVE-2005-0458 describes a cross-site scripting (XSS) vulnerability in osCommerce 2.2-MS2, specifically in the contact_us.php script where the enquiry parameter can be abused to inject arbitrary script or HTML. The NVD entry confirms the vulnerability as an XSS flaw with the affected component bei...

osCommerce contact_us.php enquiry Parameter XSS

The installed version of OSCommerce is vulnerable to a cross-site scripting XSS attack. An attacker, exploiting this flaw, would need to be able to coerce an unsuspecting user into visiting a malicious website. Upon successful exploitation, the attacker would potentially be able to steal...

CVE-2004-0458

mah-jong before 1.6.2 allows remote attackers to cause a denial of service server crash via a missing argument, which triggers a null pointer dereference...

CVE-2004-0458

mah-jong before 1.6.2 allows remote attackers to cause a denial of service server crash via a missing argument, which triggers a null pointer dereference...

CVE-2004-0458

mah-jong before 1.6.2 allows remote attackers to cause a denial of service server crash via a missing argument, which triggers a null pointer dereference...

CVE-2004-0458

CVE-2004-0458 affects mah-jong prior to 1.6.2. A missing-argument condition allows remote attackers to trigger a NULL pointer dereference, causing a denial of service (server crash) over the network. Debian’s DSA-503 advisory and OpenVAS entries confirm the issue and advise updating mah-jong to a...

CVE-2004-0458

mah-jong before 1.6.2 allows remote attackers to cause a denial of service server crash via a missing argument, which triggers a null pointer dereference...

CVE-2004-0458

mah-jong before 1.6.2 allows remote attackers to cause a denial of service server crash via a missing argument, which triggers a null pointer dereference...

CVE-2003-0458

Technical details for CVE-2003-0458 are not publicly available in the provided documents. Affected products, root cause, impact, and fixes are not specified here. Monitor for updates.

CVE-2002-0458

CVE-2002-0458 affects News-TNK 1.2.1 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to run arbitrary Javascript via the WEB parameter. According to the NVD entry, exploitation would be via a network vector with high complexity and no authenticatio...

CVE-2000-0458

The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information...

CVE-2000-0458

CVE-2000-0458 affects the MSWordView application in IMP, which creates world-readable files in the /tmp directory. This allows other local users to read potentially sensitive information. The publicly reported details indicate a local-privilege-confidentiality exposure due to insecure temporary f...