CVE-2007-1933

CVE-2007-1933 describes multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 that allow remote attackers to include and execute arbitrary local files through a ".." in the lang parameter to (1) index.php, (2) gb.php, or (3) faq.php. The root cause is directory traversal le...

Debian DSA-1049-1 : ethereal - several vulnerabilities

Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...

CentOS 3 / 4 : ethereal (CESA-2006:0420)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...

ethereal security update

CentOS Errata and Security Advisory CESA-2006:0420 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...

[SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1049-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2006 http://www.debian.org/security/faq -...

Fedora Core 4 : ethereal-0.99.0-fc4.1 (2006-461)

Many security vulnerabilities have been fixed since the previous release. - The H.248 dissector could crash. Versions affected: 0.10.14. CVE: CVE-2006-1937 - The UMA dissector could go into an infinite loop. Versions affected: 0.10.12 - 0.10.14. CVE: CVE-2006-1933 - The X.509if dissector could...

CVE-2006-1933

CVE-2006-1933 affects Ethereal (0.10.x up to 0.10.14): the UMA and BER dissectors could enter an infinite loop when processing crafted packets. Public advisories (Debian DSA-1049-1; Red Hat RHSA-2006:0420; CentOS/CESA-2006:0420) indicate updated Ethereal packages to fix these issues, with Debian ...

CVE-2002-1933

The CVE-2002-1933 issue affects Microsoft Windows 2000 Terminal Services: the terminal services screensaver does not automatically lock the terminal window when the window is minimized, potentially allowing local users to gain access to the terminal server window. The connected documents confirm ...

CVE-2005-1933

Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a user widget with the same bundle identifier CFBundleIdentifier, a different vulnerability than CVE-2005-1474...

CVE-2005-1933

CVE-2005-1933 affects Apple Mac OS X Tiger (10.4) Dashboard. It arises when a user widget uses the same CFBundleIdentifier as a system widget, causing Dashboard to override the legitimate widget and potentially let the attacker execute arbitrary commands. The impact is user-level code execution v...

CVE-2004-1933

The CVE-2004-1933 entry affects Citadel/UX versions 5.00–6.14. The underlying issue is that the database directory and files are installed with world-read permissions, enabling local users to bypass access controls and read messages that should be restricted. This is described consistently across...