CVE-2015-2282

CVE-2015-2282 is a stack-based buffer overflow in SAP’s LZC/LZH decompression code used across SAP MaxDB 7.5/7.6, NetWeaver AS ABAP/Java, RFC/GUI SDKs, SAPCAR, and related tools. The flaw (CsObjectInt::CsDecomprLZC and related LZH handling) can cause denial of service (crash) and may allow arbitr...

Remotely Exploitable Vulnerabilities in SAP Compression Algorithms

The two primary compression algorithms used by SAP SE products, some of the most popular enterprise and business management software platforms on the market, contain multiple, remotely exploitable security vulnerabilities. Martin Gallo of Core Security Consulting Services found vulnerabilities in...

SAP LZC/LZH Compression Multiple Vulnerabilities

Advisory ID Internal CORE-2015-0009 1. Advisory Information Title: SAP LZC/LZH Compression Multiple Vulnerabilities Advisory ID: CORE-2015-0009 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sap-lzc-lzh-compression-multiple-vulnerabilities Date published: 2015-05-12 Date of last...

Ubuntu: Security Advisory (USN-2282-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201406-33 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-33 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can cause arbitrary code executio...

SuSE 11.3 Security Update : wireshark (SAT Patch Number 9060)

Wireshark was updated to version 1.8.13 to fix security and stability issues. The following security vulnerabilities have been fixed : - The NFS dissector could crash. CVE-2014-2281 - The RLC dissector could crash. CVE-2014-2283 - The MPEG file parser could overflow a buffer. For more information...

Fedora Update for wireshark FEDORA-2014-3676

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

CVE-2014-2282

CVE-2014-2282 (Wireshark) affects the M3UA dissector in Wireshark 1.10.x prior to 1.10.6. The root cause is a memory allocation flaw in the epan/dissectors/packet-m3ua.c code, which can be triggered by a crafted SS7 MTP3 packet, leading to a denial of service (application crash). The provided doc...

Wireshark 1.10.x < 1.10.6 Multiple Vulnerabilities

The installed version of Wireshark 1.10.x is a version prior to 1.10.6. It is, therefore, affected by denial of service vulnerabilities in the following dissectors : - NFS dissector CVE-2014-2281 - M3UA dissector CVE-2014-2282 - RLC dissector CVE-2014-2283 Additionally, a flaw exists in the...

CVE-2012-2282

Summary of CVE-2012-2282 : EMC Celerra Network Server 6.x (before 6.0.61.0), VNX 7.x (before 7.0.53.2), and VNXe 2.0/2.1 prior to 2.1.3.19077 (MR1 SP3.2) or 2.2 before 2.2.0.19078 (MR2 SP0.2) has improper NFS access control. This allows remote authenticated users to read or modify files via NFSv2...

Debian Security Advisory DSA 2282-1 (qemu-kvm)

The remote host is missing an update to qemu-kvm announced via advisory DSA 2282-1. OpenVAS Vulnerability Test $Id: deb22821.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2282-1 qemu-kvm Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2282-1 : qemu-kvm - several vulnerabilities

Two vulnerabilities have been discovered in KVM, a solution for full virtualization on x86 hardware : - CVE-2011-2212 Nelson Elhage discovered a buffer overflow in the virtio subsystem, which could lead to denial of service or privilege escalation. - CVE-2011-2527 Andrew Griffiths discovered that...

CVE-2011-2282

Technical details (affected components, root cause, exploit vectors, or remediation) for CVE-2011-2282 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2010-2282

Cross-site request forgery CSRF vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password...

CVE-2010-2282

The CVE-2010-2282 entry describes a Cross-site Request Forgery (CSRF) vulnerability in TomatoCMS 2.0.6. The issue allows remote attackers to hijack the authentication of administrators by issuing requests that change the administrative password. The connected sources confirm the affected software...

CVE-2009-2282

The CVE-2009-2282 issue affects Sun Solaris 10 on SPARC and OpenSolaris snv_41–snv_108, where the Virtual Network Terminal Server daemon (vntsd) does not validate authorization for guest console access. This allows local control-domain users to obtain guest-domain privileges via unspecified vecto...

CVE-2008-2282

The CVE-2008-2282 issue affects Internet Photoshow and Internet Photoshow Special Edition. It allows remote bypass of authentication by setting the login_admin cookie to true, enabling partial confidentiality, integrity, and availability impacts per CVSS metrics (AV:N/AC:L/Au:N/C:P/I:P/A:P). Publ...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for specific DLLs in the user’s home directory even while browsing the local hard drive, enabling local users to run arbitrary code through malicious DLLs. This is described as a local-privilege impact with potential comple...

CVE-2007-2282

Cisco NetFlow Collection Engine (NFC) before version 6.0 is affected by a default credentials issue: the nfcuser account uses a default password, allowing remote attackers to modify NFC configuration and, on Linux, gain login access to the host OS. This is due to default accounts in NFC prior to ...