[SECURITY] [DSA 2324-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2324-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2011 http://www.debian.org/security/faq -...

Wireshark Lua Script File Arbitrary Code Execution Vulnerability - Windows

Wireshark is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

[ MDVSA-2011:138 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:138 http://www.mandriva.com/security/ Package : wireshark Date : September 28, 2011 Affected: 2011. Problem Description: This advisory updates wireshark to the latest version 1.6.2, fixing several security...

CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory...

DSquare Exploit Pack: D2SEC_WIRESHARK

Name| d2secwireshark ---|--- CVE| CVE-2011-3360 Exploit Pack| D2ExploitPack Description| d2secwireshark Notes|...

CVE-2011-3360

Wireshark flats: CVE-2011-3360 affects Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2. Root cause is insecure load/search path handling that can cause execution of an untrusted Lua script (Trojan horse) from an unspecified directory, enabling local privilege escalation. Public advisories con...

Wireshark console.lua Pre-Loading Script Execution

This module exploits a vulnerability in Wireshark 1.6 or less. When opening a pcap file, Wireshark will actually check if there's a 'console.lua' file in the same directory, and then parse/execute the script if found. Versions affected by this vulnerability: 1.6.0 to 1.6.1, 1.4.0 to 1.4.8 Module...

CVE-2010-3360

CVE-2010-3360 affects Hipo 0.6.1. The vulnerability arises from a zero-length directory name placed into LD_LIBRARY_PATH, enabling a local attacker to load a Trojan horse shared library from the current working directory and gain privileges. The available sources describe the issue and impact but...

CVE-2009-3360

Datemill 1.0 is affected by multiple XSS vulnerabilities. The issues arise from unsafely reflected input in the return parameter to photo_view.php and the st parameter to photo_search.php and search.php, enabling remote script injection. No explicit remediation or patch details are provided in th...

CVE-2009-3360

creationtimestamp| type| source ---|---|--- 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34548 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34550 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34549...

bitchx EOLed in Slackware

This is a notice that bitchx, an IRC client based on ircii-EPIC4, has been removed from Slackware -current and will not be part of future Slackware releases. Security issues and bugs have been reported, but upstream work seems to have stalled leaving bitchx in a state where there are known proble...

CVE-2008-3583

Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long URL in the SRC attribute of an IMG element. NOTE: this might be related to CVE-2008-3360. NOTE: it was later reported that 2.08 Beta 4 is also affected...

CVE-2008-3583

CVE-2008-3583 affects IntelliTamper 2.07 with a buffer overflow in the HTML parser triggered by a long URL in the SRC attribute of an IMG element, enabling remote code execution. The issue is noted to possibly relate to CVE-2008-3360, and reports indicate 2.08 Beta 4 is also affected. The NVD ent...

CVE-2008-3360

Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494...

CVE-2008-3360

CVE-2008-3360: Stack-based buffer overflow in the HTML parser of IntelliTamper 2.0.7 enables remote code execution via a long URL in the HREF attribute of an A element. This is described as a distinct issue from CVE-2006-2494. The connected sources confirm the affected software and root cause but...

CVE-2008-3360

creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6103 2008-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6116 2008-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6121 2008-08-13...

CVE-2007-3360

CVE-2007-3360 affects BitchX 1.1-final, where a bug in hook.c allows a remote IRC server to execute arbitrary shell commands. By sending crafted data containing NICK and EXEC strings, the input overflows a hash table and injects an EXEC hook that runs commands on the client. This is a network‑acc...

CVE-2006-3360

Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter, which will display a different error message if the file exists...

CVE-2006-3360

Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter, which will display a different error message if the file exists...

CVE-2006-3360

CVE-2006-3360 affects phpSysInfo, where Directory traversal in index.php (lng parameter) can reveal whether arbitrary files exist via a .. sequence plus a trailing null (%00). Affected versions are 2.5.1 through 3.2.4; the issue is exploitable remotely and can disclose file existence information ...