496 matches found
FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-1938
Sony mylo COM-2 firmware before 1.002 does not verify server SSL certificates, enabling potential information disclosure and spoofing. Affected products include the Japan and US models of mylo COM-2 system software prior to Ver.1.002. Root cause: SSL/TLS server certificate validation is not perfo...
Debian Security Advisory DSA 1049-1 (ethereal)
The remote host is missing an update to ethereal announced via advisory DSA 1049-1. Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-1932 The OID printing...
SuSE 10 Security Update : krb5-apps-servers and krb5-apps-clients (ZYPP Patch Number 1938)
Various return checks of setuid and seteuid calls have been fixed in kerberos client and server applications. If these applications are setuid, it might have been possible for local attackers to gain root access. CVE-2006-3083 We are not affected by the seteuid problems, tracked by CVE-2006-3084...
Debian DSA-1049-1 : ethereal - several vulnerabilities
Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...
CentOS 3 / 4 : ethereal (CESA-2006:0420)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...
ethereal security update
CentOS Errata and Security Advisory CESA-2006:0420 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic...
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...
[SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1049-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2006 http://www.debian.org/security/faq -...
Fedora Core 4 : ethereal-0.99.0-fc4.1 (2006-461)
Many security vulnerabilities have been fixed since the previous release. - The H.248 dissector could crash. Versions affected: 0.10.14. CVE: CVE-2006-1937 - The UMA dissector could go into an infinite loop. Versions affected: 0.10.12 - 0.10.14. CVE: CVE-2006-1933 - The X.509if dissector could...
CVE-2006-1938
CVE-2006-1938 affects Ethereal (0.8.x up to 0.10.14) with a NULL pointer dereference in the SMB PIPE dissector and when reading a malformed Sniffer capture, potentially causing a crash. Connected advisories corroborate multiple related issues in Ethereal’s protocol dissectors and note remediation...
CVE-2002-1938
The vulnerability affects Virgil CGI Scanner 0.9 and allows remote command execution via the tar (TARGET) or zielport (ZIELPORT) parameters. Root cause: improper handling of these inputs enables arbitrary commands to run on the affected host. Connected sources (NVD, Red Hat, CVE lists) confirm th...
CVE-2004-1938
This CVE (CVE-2004-1938) concerns a SQL injection in Phorum 3.4.7’s userlogin.php. The vulnerability is triggered by doubly hex-encoded input (e.g., "%2527" which becomes a single quote) via the phorum_uriauth parameter to list.php, allowing remote attackers to execute arbitrary SQL commands. The...
CVE-2004-1938
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorumuriauth parameter to list.php...