117 matches found
Gentoo Security Advisory GLSA 200407-08 (Ethereal)
The remote host is missing updates announced in advisory GLSA 200407-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite
The remote host is missing an update to the system as announced in the referenced advisory. VID 265c8b00-d2d0-11d8-b479-02e0185c0b53 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0633
The CVE-2008-0633 entry covers Anon Proxy Server (versions up to 0.102) with a buffer overflow when user authentication is enabled. A username containing a large number of quotes triggers the overflow during escaping, enabling a remote denial of service . Connected documents confirm the affected ...
Remote file inclusion
PHP remote file inclusion vulnerability in include/blocks/weekevents.php in MyNews 4.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the myNewsConfpathsysindex parameter, a different vector than CVE-2007-0633...
CVE-2007-0633
CVE-2007-0633 describes a PHP remote file inclusion in MyNews 4.2.2 and earlier. The flaw is triggered by passing a URL in myNewsConf[path][sys][index], through which an attacker can execute arbitrary PHP code. Affected product is MyNews (version 4.2.2 and earlier); root cause: improper handling ...
CVE-2006-0633
The CVE concerns Invision Power Board (IPB) 2.1.4, where the make_password function in ipsclass.php generates the authentication code sent to users with lost passwords from random data derived from partially predictable seeds. This may allow remote attackers to guess the code and change an IPB ac...
CVE-2005-0633
The CVE-2005-0633 issue affects Trillian 3.0 and Trillian Pro 3.0. It is described as a buffer overflow that allows remote attackers to execute arbitrary code through a crafted PNG image file. The available sources consistently state remote code execution is possible due to the overflow, but do n...
CVE-2005-0633
Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file...
CVE-2004-0633
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service process abort via an integer overflow...
RHEL 2.1 / 3 : ethereal (RHSA-2004:378)
Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. The SNMP dissector in Ethereal releases 0.8.15 through 0.10.4 contained a memory read flaw. On a system where Ethereal is running, a remote attacker could...
CVE-2004-0633
The CVE-2004-0633 issue affects Ethereal’s iSNS dissector (versions 0.10.3–0.10.4). A remote, unauthenticated attacker could cause a crash or potentially execute code by sending malformed iSNS packets, per included reports. Impact is a denial of service (partial availability) and possible code ex...
CVE-2003-0633
CVE-2003-0633 affects Oracle E-Business Suite 11.5.1–11.5.8, specifically the AOL/J Setup Test Suite component aoljtest.jsp. The vulnerabilities allow a remote attacker to obtain sensitive information without authentication, including the GUEST user password and the application server security ke...
CVE-2001-0633
Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' dot dot attack in the sample script 'codebrws.asp'...
CVE-2001-0633
Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' dot dot attack in the sample script 'codebrws.asp'...
CVE-2001-0633
The CVE-2001-0633 issue affects Sun Chili!Soft ASP on multiple Unix platforms. The vulnerability is a directory traversal in the sample script codebrws.asp, allowing a remote attacker to read arbitrary files above the web root by using a .. path traversal. The description does not specify affecte...
CVE-2000-0633
Technical details for CVE-2000-0633 are not publicly available in the provided documents. The description notes a local reboot/halt issue in the Mandrake Linux usermode package, but no specifics on affected versions, root cause, or fixes are supplied. Monitor for updates.