[SECURITY] [DSA 2324-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2324-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2011 http://www.debian.org/security/faq -...

Wireshark Lua Script File Arbitrary Code Execution Vulnerability - Windows

Wireshark is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

[ MDVSA-2011:138 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:138 http://www.mandriva.com/security/ Package : wireshark Date : September 28, 2011 Affected: 2011. Problem Description: This advisory updates wireshark to the latest version 1.6.2, fixing several security...

CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...

DSquare Exploit Pack: D2SEC_WIRESHARK

Name| d2secwireshark ---|--- CVE| CVE-2011-3360 Exploit Pack| D2ExploitPack Description| d2secwireshark Notes|...

CVE-2011-3360

Wireshark flats: CVE-2011-3360 affects Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2. Root cause is insecure load/search path handling that can cause execution of an untrusted Lua script (Trojan horse) from an unspecified directory, enabling local privilege escalation. Public advisories con...

CVE-2010-3360

CVE-2010-3360 affects Hipo 0.6.1. The vulnerability arises from a zero-length directory name placed into LD_LIBRARY_PATH, enabling a local attacker to load a Trojan horse shared library from the current working directory and gain privileges. The available sources describe the issue and impact but...

CVE-2009-3360

Datemill 1.0 is affected by multiple XSS vulnerabilities. The issues arise from unsafely reflected input in the return parameter to photo_view.php and the st parameter to photo_search.php and search.php, enabling remote script injection. No explicit remediation or patch details are provided in th...

CVE-2009-3360

creationtimestamp| type| source ---|---|--- 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34548 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34550 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34549...

bitchx EOLed in Slackware

This is a notice that bitchx, an IRC client based on ircii-EPIC4, has been removed from Slackware -current and will not be part of future Slackware releases. Security issues and bugs have been reported, but upstream work seems to have stalled leaving bitchx in a state where there are known proble...

CVE-2008-3583

Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long URL in the SRC attribute of an IMG element. NOTE: this might be related to CVE-2008-3360. NOTE: it was later reported that 2.08 Beta 4 is also affected...

CVE-2008-3583

CVE-2008-3583 affects IntelliTamper 2.07 with a buffer overflow in the HTML parser triggered by a long URL in the SRC attribute of an IMG element, enabling remote code execution. The issue is noted to possibly relate to CVE-2008-3360, and reports indicate 2.08 Beta 4 is also affected. The NVD ent...

CVE-2008-3360

Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494...

CVE-2008-3360

CVE-2008-3360: Stack-based buffer overflow in the HTML parser of IntelliTamper 2.0.7 enables remote code execution via a long URL in the HREF attribute of an A element. This is described as a distinct issue from CVE-2006-2494. The connected sources confirm the affected software and root cause but...

CVE-2008-3360

creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6103 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6116 2008-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6121 2008-08-13...

CVE-2007-3360

CVE-2007-3360 affects BitchX 1.1-final, where a bug in hook.c allows a remote IRC server to execute arbitrary shell commands. By sending crafted data containing NICK and EXEC strings, the input overflows a hash table and injects an EXEC hook that runs commands on the client. This is a network‑acc...

CVE-2006-3360

Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter, which will display a different error message if the file exists...

CVE-2006-3360

Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter, which will display a different error message if the file exists...

CVE-2006-3360

CVE-2006-3360 affects phpSysInfo, where Directory traversal in index.php (lng parameter) can reveal whether arbitrary files exist via a .. sequence plus a trailing null (%00). Affected versions are 2.5.1 through 3.2.4; the issue is exploitable remotely and can disclose file existence information ...

CVE-2005-3360

The CVE-2005-3360 issue affects Trend Micro PC-Cillin Internet Security 2005, version 12.00 build 1244 (and likely earlier builds). The vulnerability arises from insecure default ACLs installed with Trend Micro products, allowing local users to modify or move critical program files. This can enab...