Buffer overflow

Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-1580

The dissectcmstatustlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service infinite loop via a malform...

Ruby on Rails JSON Processor YAML Deserialization Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Ruby on Rails 3.0 and 2.3 JSON Parser vulnerability

Overview The Ruby on Rails 3.0 and 2.3 JSON parser contain a vulnerability that may result in arbitrary code execution. Description The Ruby on Rails advisory states:There is a vulnerability in the JSON code for Ruby on Rails which allows attackers to bypass authentication systems, inject arbitra...

Ruby On Rails XML Processor YAML Deserialization Code Execution

This Metasploit module exploits a remote code execution vulnerability in the XML request processor of the Ruby on Rails application framework. This vulnerability allows an attacker to instantiate a remote object, which in turn can be used to execute any ruby code remotely in the context of the...

Ruby on Rails XML Processor YAML Deserialization Code Execution

This module exploits a remote code execution vulnerability in the XML request processor of the Ruby on Rails application framework. This vulnerability allows an attacker to instantiate a remote object, which in turn can be used to execute any ruby code remotely in the context of the application...

Wireshark GSM RLC MAC dissector Buffer Overflow Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkgsmrlcmacbofmacosx.nasl 5950 2017-04-13 09:02:06Z teissa $ Wireshark GSM RLC MAC dissector Buffer Overflow Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyrig...

Wireshark Multiple Dissector Multiple Vulnerabilities - Dec12 (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulndec12win.nasl 6022 2017-04-25 12:51:04Z teissa $ Wireshark Multiple Dissector Multiple Vulnerabilities - Dec12 Windows Authors: Rachana Shetty Copyright: Copyright c...

Wireshark Multiple Dissector Multiple Vulnerabilities - Dec12 (Mac OS X)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulndec12macosx.nasl 5999 2017-04-21 09:02:32Z teissa $ Wireshark Multiple Dissector Multiple Vulnerabilities - Dec12 Mac OS X Authors: Rachana Shetty Copyright: Copyrigh...

DEBIAN-CVE-2012-6062

The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2012-6061

The dissectwtpcommon function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data type for a certain length field, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a...

CVE-2012-6054

The dissectsflow245addresstype function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service infinite loop via a packet that ...

CVE-2012-6056

Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...

CVE-2012-6054

The dissectsflow245addresstype function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service infinite loop via a packet that ...

CVE-2012-6056

Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...

CVE-2012-6061

CVE-2012-6061 affects the Wireshark WTP dissector. The dissect_wtp_common function in epan/dissectors/packet-wtp.c uses an incorrect data type for a length field, enabling a crafted packet to trigger an integer overflow and infinite loop, causing denial of service. Affected products/versions: Wir...

CVE-2012-6054

The dissectsflow245addresstype function in epan/dissectors/packet-sflow.c in the sFlow dissector in Wireshark 1.8.x before 1.8.4 does not properly handle length calculations for an invalid IP address type, which allows remote attackers to cause a denial of service infinite loop via a packet that ...

CVE-2012-6056

Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...

[USN-1603-1] Ruby vulnerabilities

========================================================================== Ubuntu Security Notice USN-1603-1 October 10, 2012 ruby1.8 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Wireshark LDP PPP and HSRP dissector Multiple Vulnerabilities (Mac OS X)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdissectormultvulnmacosx.nasl 5888 2017-04-07 09:01:53Z teissa $ Wireshark LDP PPP and HSRP dissector Multiple Vulnerabilities Mac OS X Authors: Madhuri D Copyright:...