361 matches found
CVE-2008-1935
creationtimestamp| type| source ---|---|--- 2008-04-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5488...
RTMP Server Detection
The remote service supports Real Time Messaging Protocol RTMP, a proprietary protocol used by Flash Player for streaming real-time audio, video, and objects using a binary connection. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31097; scriptversion"1.9";...
iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Multiple Integer Overflow Vulnerabilities
iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Adobe Flash Media Server is an application server for Flash based applications. It provides an environment to run interactive media applications, as well as audio and video...
Debian Security Advisory DSA 1049-1 (ethereal)
The remote host is missing an update to ethereal announced via advisory DSA 1049-1. Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-1932 The OID printing...
CVE-2007-1935
CVE-2007-1935 affects ScarAdControl (ScarAdController) 1.1, where admin/index.php uses the site parameter and calls file_exists, enabling a remote attacker to execute arbitrary PHP code via UNC share or local file path. This is a PHP file inclusion vulnerability; the impact is described as arbitr...
Debian DSA-1049-1 : ethereal - several vulnerabilities
Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...
CentOS 3 / 4 : ethereal (CESA-2006:0420)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...
ethereal security update
CentOS Errata and Security Advisory CESA-2006:0420 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic...
[SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1049-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2006 http://www.debian.org/security/faq -...
Fedora Core 4 : ethereal-0.99.0-fc4.1 (2006-461)
Many security vulnerabilities have been fixed since the previous release. - The H.248 dissector could crash. Versions affected: 0.10.14. CVE: CVE-2006-1937 - The UMA dissector could go into an infinite loop. Versions affected: 0.10.12 - 0.10.14. CVE: CVE-2006-1933 - The X.509if dissector could...
Ethereal: Multiple vulnerabilities in protocol dissectors
Background Ethereal is a feature-rich network protocol analyzer. Description Coverity discovered numerous vulnerabilities in versions of Ethereal prior to 0.99.0, including: buffer overflows in the ALCAP CVE-2006-1934, COPS CVE-2006-1935 and telnet CVE-2006-1936 dissectors. buffer overflows in th...
CVE-2006-1935
CVE-2006-1935 affects Ethereal up to 0.10.14 via the COPS dissector. The vulnerability is a buffer overflow in the COPS dissector that could allow a remote attacker to crash Ethereal and potentially execute arbitrary code. Public documents (Debian DSAs, RHSA/CentOS advisories, OpenVAS entries) co...
MS Windows ASN.1 Remote Exploit (MS04-007)
Exploit for unknown platform in category remote exploits ========================================== MS Windows ASN.1 Remote Exploit MS04-007 ========================================== Microsoft ASN.1 remote exploit for CVE-2005-1935 http://www.inj3ct0r.com/sploits/8385.tar.gz 0day.today 2018-03-3...
CVE-2002-1935
Pingtel Xpressa versions 1.2.5 through 2.0.1 are affected by CVE-2002-1935 due to predictable Call-ID, CSeq, and To/From SIP URL values in SIP requests, which can let remote attackers avoid registering with the SIP registrar. The root cause is the lack of randomness in SIP identifiers, enabling a...
CVE-2005-1935
Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library MSASN1.DLL allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as...
CVE-2005-1935
CVE-2005-1935 documents a heap-based buffer overflow in the BERDecBitString function of Microsoft's ASN.1 library (MSASN1.DLL). The overflow occurs when processing nested constructed bit strings, leading to a realloc of a non-null pointer and potential overwrite of freed memory, demonstrated via ...
CVE-2004-1935
CVE-2004-1935 describes a cross-site scripting (XSS) vulnerability in SCT Campus Pipeline where remote attackers can inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an email attachment. The NVD metrics indicate the impact is limited to partial integrity...
Generic Shell Detection (Printer Telnet)
Binary data 1935.prm...
Microsoft Windows - ASN.1 Remote (MS04-007)
Microsoft ASN.1 remote exploit for CVE-2005-1935 // MS04-007 Solar Eclipse solareclipse at phreedom dot org https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3022.tar.gz 12262006-killbill.tar.gz milw0rm.com 2004-03-26...
Microsoft Windows - ASN.1 Remote (MS04-007)
Microsoft Windows - ASN.1 Remote MS04-007 Microsoft ASN.1 remote exploit for CVE-2005-1935 // MS04-007 Solar Eclipse solareclipse at phreedom dot org https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3022.tar.gz 12262006-killbill.tar.gz milw0rm.com 2004-03-26...