openSUSE 10 Security Update : wireshark (wireshark-5515)

Various vulnerabilities have been fixed in wireshark: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

[ GLSA 200808-04 ] Wireshark: Denial of Service

Gentoo Linux Security Advisory GLSA 200808-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2008-3137

The GSM SMS dissector in Wireshark formerly Ethereal 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service application crash via unknown vectors...

CVE-2008-3137

The GSM SMS dissector in Wireshark formerly Ethereal 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service application crash via unknown vectors...

CVE-2008-3137

CVE-2008-3137 concerns the GSM SMS dissector in Wireshark (formerly Ethereal) versions 0.99.2 through 1.0.0, where remote attackers could cause a denial of service (application crash) via unknown vectors. The connected advisories (e.g., MiracleLinux AXSA:2008-511/457, OpenVAS/SLES entries) collec...

CVE-2007-3137

CVE-2007-3137 concerns multiple cross-site scripting (XSS) vulnerabilities in 4print.asp of WmsCMS 2.0 and earlier. The affected component is 4print.asp, with the XSS vectors reported via the sbl, sbr, and search parameters (the note about the pageid parameter in index.php is stated as incorrect)...

CVE-2007-3137

Multiple cross-site scripting XSS vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sbl, 2 sbr, or 3 search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected, but this is...

CVE-2006-3137

CVE-2006-3137 describes a Cross-site Scripting (XSS) vulnerability in Edge eCommerce Shop, specifically in productDetail.asp, where an attacker can inject arbitrary script via the cart_id parameter. The affected component is the Edge eCommerce Shop web application; the root cause is unsanitized i...

FreeBSD : cfengine -- arbitrary file overwriting vulnerability (8688d5cd-328c-11da-a263-0001020eed82)

A Debian Security Advisory reports : Javier Fernandez-Sanguino Pena discovered several insecure temporary file uses in cfengine, a tool for configuring and maintaining networked machines, that can be exploited by a symlink attack to overwrite arbitrary files owned by the user executing cfengine,...

Mandrake Linux Security Advisory : cfengine (MDKSA-2005:184)

Javier Fernndez-Sanguino Pea discovered several insecure temporary file uses in cfengine = 1.6.5 and = 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. CVE-2005-2960 In addition, Javier discovered the cfmailfilter and cfcron.in...

CVE-2005-3137

CVE-2005-3137 affects cfengine 1.6.5 via insecure temporary file handling in cfmailfilter and cfcron.in, enabling a local user to exploit a symlink to overwrite arbitrary files owned by the executing user (likely root). Connected advisories (Debian DSA-835-1, DSA-836-1) document insecure temporar...