CVE-2014-2287

CVE-2014-2287 affects Asterisk chan_sip in 1.8.x prior to 1.8.26.1, 11.8.x prior to 11.8.1, and 12.1.x prior to 12.1.1, plus certain Certified Asterisk builds. A remote authenticated user can cause a denial of service by sending an INVITE with a malformed or invalid Session-Expires or Min-SE head...

Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: In Asterisk before 11.6.1, a 16 bit SMS message that contains an odd message length value will cause the message decoding loop to run forever. The message buffer is not on the stack but will be overflowed resulting in corrupted memory and an...

CVE-2013-2287

The CVE-2013-2287 issue affects WordPress Uploader Plugin 1.0.4, specifically XSS in views/notify.php via the notify or blog parameters. The underlying vulnerability allows remote attackers to inject arbitrary scripts/HTML, with impact limited to partial integrity impact and no confidentiality/av...

Fedora Update for asterisk FEDORA-2014-3762

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2014-3762 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for asterisk FEDORA-2014-3762

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AST-2014-002: Denial of Service Through File Descriptor Exhaustion with chan_sip Session-Timers

Asterisk Project Security Advisory - AST-2014-002 Product Asterisk Summary Denial of Service Through File Descriptor Exhaustion with chansip Session-Timers Nature of Advisory Denial of Service Susceptibility Remote Authenticated or Anonymous Sessions Severity Moderate Exploits Known No Reported O...

Asterisk SIP INVITE请求处理拒绝服务漏洞

CVE ID:CVE-2014-2287 Asterisk是一款实现电话用户交换机（PBX）功能的自由软件、开源软件。 Asterisk处理特制的SIP INVITE请求时存在漏洞，由于没有正确释放文件描述符，允许远程攻击者利用漏洞提交恶意请求消耗完所有可用文件描述符，进行拒绝服务攻击。 0 Asterisk Open Source 1.8.26.0 Asterisk Open Source 11.8.0 Asterisk Open Source 12.1.0 Certified Asterisk 1.8.15-cert4 Certified Asterisk 11.6-cert1...

CVE-2013-2287

creationtimestamp| type| source ---|---|--- 2013-03-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38355...

CVE-2012-2287

Summary: EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP/Windows Server 2003 are affected by an access-control bypass vulnerability. In specific configurations, a remote authenticated user can bypass the intended token-authentication step and establish a login ses...

Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64

Multiple buffer overflow flaws were found in the Wireshark SigComp Universal Decompressor Virtual Machine UDVM dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7438)

Wireshark was updated to version 1.4.4 to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57261;...

CVE-2011-2287

CVE-2011-2287 affects Oracle Solaris 8, 9, 10 and 11 Express via fingerd, allowing remote attackers to impact availability. Connected advisories/plugins confirm specific patches: Solaris 9 SPARC patch 147264-01; Solaris 10 x86 patch 146674-01; Solaris 10 SPARC patch 146673-01. Patches installable...

Solaris 9 (sparc) : 147264-01

SunOS 5.9: in.fingerd patch. Date this patch was last updated by Sun : Jul/06/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 147265-01

SunOS 5.9x86: in.fingerd patch. Date this patch was last updated by Sun : Jul/06/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-2)

Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995,...

openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-1)

Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995,...

Fedora Update for wireshark FEDORA-2011-5529

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7439)

Wireshark was updated to version 1.4.4 to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53319;...

Mandriva Update for kernel MDVSA-2010:188 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:188 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for wireshark FEDORA-2010-13416

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2010-13416 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...