CVE-2010-2559

CVE-2010-2559 refers to an Uninitialized Memory Corruption vulnerability in Internet Explorer 8 where remote code execution could occur if a manipulated memory object is accessed (uninitialized or deleted). The connected KB article (MS10-002, KB 978207) describes a cumulative security update that...

openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)

w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...

Fedora Core 10 FEDORA-2009-7998 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-7998. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora 10 : wireshark-1.2.1-1.fc10 (2009-7998)

Rebased to 1.2.x, fixing several security flaws, see the security advisory for details: http://www.wireshark.org/security/wnpa-sec-2009-04.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora Core 11 FEDORA-2009-9837 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-9837. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Gentoo Security Advisory GLSA 200909-16 (wireshark)

The remote host is missing updates announced in advisory GLSA 200909-16. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Wireshark Multiple Vulnerabilities (Jul 2009) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

CVE-2009-2559

Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service crash via unspecified vectors related to an array index error. NOTE: some of these details are obtained from third party information...

CVE-2009-2559

Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service crash via unspecified vectors related to an array index error. NOTE: some of these details are obtained from third party information...

CVE-2009-2559

Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service crash via unspecified vectors related to an array index error. NOTE: some of these details are obtained from third party information...

CVE-2009-2559

CVE-2009-2559 concerns a buffer overflow in Wireshark’s IPMI dissector (Wireshark 1.2.0). The root cause is an array index error in the IPMI dissector, which can be triggered to cause a crash (denial of service) via remote input. Public documents indicate that Wireshark 1.2.2/related updates addr...

CVE-2008-2559

CVE-2008-2559 concerns Borland Interbase 2007 SP2 (8.1.0.256). The issue is an integer/stack overflow triggered by a malformed packet sent to TCP port 3050, allowing remote attackers to execute arbitrary code with the service’s privileges. The vulnerability affects the InterBase server; CORE-2008...

CVE-2008-2559

Integer overflow in Borland Interbase 2007 SP2 8.1.0.256 allows remote attackers to execute arbitrary code via a malformed packet to TCP port 3050, which triggers a stack-based buffer overflow. NOTE: this issue might be related to CVE-2008-0467...

CVE-2006-2559

CVE-2006-2559 affects Linksys WRT54G Wireless-G Broadband Router. A UPnP request with a modified InternalClient parameter, which is not validated, allows remote attackers to bypass access restrictions and perform unauthorized operations, demonstrated by using AddPortMapping to forward arbitrary t...

CVE-2004-2559

DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including 1 Mediaselectiondialog, 2 Recent changes, 3 feed, and 4 search, possibly due to the lack of ACL checks...

CVE-2004-2559

CVE-2004-2559 affects DokuWiki prior to 2004-10-19. The issue allows remote attackers to access administrative functions (Mediaselectiondialog, Recent changes, feed, search) due to missing ACL checks. This can impact confidentiality, integrity, and availability as reflected by CVSS metrics (AV:N/...

CVE-2005-2559

CVE-2005-2559 affects the e107 web portal’s ePing plugin (versions 1.02 and earlier). The vulnerability arises from improper handling/validation of the eping_count and eping_host parameters in doping.php, allowing shell metacharacters to be injected and used in system() calls. Consequence: remote...

CVE-2004-2559

DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including 1 Mediaselectiondialog, 2 Recent changes, 3 feed, and 4 search, possibly due to the lack of ACL checks...