Manhali 1.8 - Local File Inclusion

Exploit Title: Manhali v1.8 Local File Inclusion Vulnerability Date: 20/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.manhali.com/ Software Link: http://sourceforge.net/projects/manhali/files/manhali1.8.zip/download Versio...

AST-2012-013: ACL rules ignored when placing outbound calls by certain IAX2 users

Asterisk Project Security Advisory - AST-2012-013 Product Asterisk Summary ACL rules ignored when placing outbound calls by certain IAX2 users Nature of Advisory Unauthorized use of system Susceptibility Remote Authenticated Sessions Severity Moderate Exploits Known None Reported On 07/27/2012...

Wireshark Multiple Vulnerabilities(01) - August 2012 (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvuln01aug12win.nasl 5912 2017-04-10 09:01:51Z teissa $ Wireshark Multiple Vulnerabilities01 - August 2012 Windows Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

CVE-2012-4298

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

CVE-2012-4294

Buffer overflow in the channelisedfillsdhg707format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed aka rate value...

Buffer overflow

Buffer overflow in the channelisedfillsdhg707format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed aka rate value...

Buffer overflow

Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service CPU consumption via a malformed packet...

CVE-2012-4295

Array index error in the channelisedfillsdhg707format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service application crash via a crafted speed aka rate value...

Code injection

Array index error in the channelisedfillsdhg707format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service application crash via a crafted speed aka rate value...

Integer overflow

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

CVE-2012-4298

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

CVE-2012-4296

Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service CPU consumption via a malformed packet...

CVE-2012-4298

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

CVE-2012-4295

CVE-2012-4295: In the ERF dissector (Wireshark 1.8.x before 1.8.2), an array index error in channelised_fill_sdh_g707_format can be triggered by a crafted speed (rate) value, leading to an application crash (DoS). Affected software is Wireshark 1.8.x prior to 1.8.2; remediation per public advisor...

CVE-2012-4298

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

CVE-2012-4295

Array index error in the channelisedfillsdhg707format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service application crash via a crafted speed aka rate value...

CVE-2012-4295

Array index error in the channelisedfillsdhg707format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service application crash via a crafted speed aka rate value...

CVE-2012-4286

The pcapngreadpacketblock function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted pcap-ng file...

krb5: KDC daemon crash via free() of an uninitialized pointer

The kdchandleprotectednegotiation function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute...

Wireshark 1.8.x < 1.8.1 Multiple Denial of Service Vulnerabilities

The installed version of Wireshark is 1.8.x before 1.8.1. This version is affected by the following vulnerabilities : - An error exists in the 'PPP' dissector that can cause the application to crash when reading a malformed packet from either the wire or from a capture file. CVE-2012-4048 - An...