Medium: net-snmp

Issue Overview: A buffer overflow flaw was found in the way the decodeicmpmsg function in the ICMP-MIB implementation processed Internet Control Message Protocol ICMP message statistics reported in the /proc/net/snmp file. A remote attacker could send a message for each ICMP message type, which...

net-snmp security and bug fix update

1:5.5-49.0.1.el65.1 - snmptrapd: Fix crash due to access of freed memory John Haxby orabug 14404682 1:5.5-49.1 - added 'diskio' option to snmpd.conf, it's possible to monitor only selected devices in diskIOTable 990674 - fixed CVE-2014-2284: denial of service flaw in Linux implementation of...

Fedora Update for net-snmp FEDORA-2014-3427

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : net-snmp-5.7.2-17.fc20 (2014-3427)

A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. This release fixes this bug and all users are encouraged to update their SNMP agent if they make use of the ICMP-MIB table objects. Note that Tenable Network Security has extracted the preceding...

CVE-2012-2284

EMC NetWorker Module for Microsoft Applications (NMM) affects versions 2.2.1, 2.3 before build 122, and 2.4 before build 375. The Information Disclosure vulnerability (CVE-2012-2284) occurs when installing/upgrading on Microsoft Exchange Server, exposing cleartext administrator credentials after ...

ESA-2012-025: EMC NetWorker Module for Microsoft Applications (NMM) Multiple Vulnerabilities

ESA-2012-025.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-025: EMC NetWorker Module for Microsoft Applications NMM Multiple Vulnerabilities. EMC Identifier: ESA-2012-025 CVE Identifier: CVE-2012-2284,CVE-2012-2290 Severity Rating: See below for individual severity scores EMC...

Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64

Multiple buffer overflow flaws were found in the Wireshark SigComp Universal Decompressor Virtual Machine UDVM dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7438)

Wireshark was updated to version 1.4.4 to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57261;...

Debian DSA-2284-1 : opensaml2 - implementation error

Juraj Somorovsky, Andreas Mayer, Meiko Jensen, Florian Kohlar, Marco Kampmann and Joerg Schwenk discovered that Shibboleth, a federated web single sign-on system is vulnerable to XML signature wrapping attacks. More details can be found in the Shibboleth advisory. %NASLMINLEVEL 70300 C Tenable...

CVE-2011-2284

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 Bundle 17 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance...

CVE-2011-2284

Technical details about CVE-2011-2284 are not provided in the supplied documents. Monitor for updates from Oracle/PeopleSoft for affected product/version and remediation.

openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-2)

Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995,...

Fedora Update for wireshark FEDORA-2011-5529

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-1)

Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995,...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7439)

Wireshark was updated to version 1.4.4 to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53319;...

Fedora Update for wireshark FEDORA-2010-13416

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2010-13416 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Stack overflow

Stack-based buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.14 and 1.2.0 through 1.2.9 has unknown impact and remote attack vectors. NOTE: this issue exists because of a CVE-2010-2284 regression...

RedHat Update for wireshark RHSA-2010:0625-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2010:0625-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Moderate: Red Hat Security Advisory: wireshark security update

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

wireshark security update

1.0.15-1.0.1.el55.1 - Add oracle-ocfs2-network.patch 1.0.15-1 - upgrade to 1.0.15 - http://www.wireshark.org/docs/relnotes/wireshark-1.0.15.html - fixes CVE-2010-2287 CVE-2010-2284 - Related: 612239 1.0.14-1.2 - fix corner case in CVE-2010-2284 - Related: 612239 1.0.14-1 - upgrade to 1.0.14 -...