CVE-2011-3390

IBM Open Admin Tool (OAT) for Informix is affected by XSS in index.php prior to version 2.72. The vulnerability arises from insufficient input sanitization of the login action’s parameters (informixserver, host, port), enabling arbitrary script/HTML injection in a user’s browser. Mitigation: upgr...

CVE-2011-3390

creationtimestamp| type| source ---|---|--- 2011-08-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36091...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5009131 within the Su...

CVE-2009-3390

Affected software: Sun Solaris 10 and OpenSolaris (snv_28 through snv_109). Vulnerable components: iscsiadm and iscsitadm utilities, with root cause related to the libima library. Impact: local users with certain RBAC execution profiles can gain privileges via unspecified vectors. Context: exploi...

SuSE9 Security Update : ethereal (YOU Patch Number 11574)

Various security problems were fixed in the wireshark 0.99.6 release, which were backported to ethereal predecessor of wireshark : - Wireshark allowed remote attackers to cause a denial of service crash via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload...

Mandriva Update for wireshark MDKSA-2007:145 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDKSA-2007:145 wireshark Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

RedHat Update for wireshark RHSA-2008:0059-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2008:0059-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2008-3390

CVE-2008-3390 describes a directory traversal in Minishowcase Image Gallery (version 09b136) via libraries/general.init.php when register_globals is enabled. An attacker can use a .. in the lang parameter to include and execute local files. The NVD entry assigns a CVSS v2 base score of 6.8 (MEDIU...

CVE-2008-3390

creationtimestamp| type| source ---|---|--- 2008-07-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6156...

WirelessIP5000 has multiple vulnerabilities

Overview WirelessIP5000, a wireless IP phone from Hitachi Cable, contains multiple vulnerabilities; - Illegal access using the port TCP3390 - SNMP access using an arbitrary community name - Access to the HTTP server by an unauthorized user in the factory default configuration - The HTTP server...

WirelessIP5000 has multiple vulnerabilities

Overview WirelessIP5000, a wireless IP phone from Hitachi Cable, contains multiple vulnerabilities; - Illegal access using the port TCP3390 - SNMP access using an arbitrary community name - Access to the HTTP server by an unauthorized user in the factory default configuration - The HTTP server...

CentOS 3 : wireshark (CESA-2008:0059)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known ...

Moderate: Red Hat Security Advisory: wireshark security update

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known ...

RHEL 3 : wireshark (RHSA-2008:0059)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known ...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 3888)

Various security problems were fixed in the wireshark 0.99.6 release, which were backported to ethereal predecessor of wireshark : - Wireshark allowed remote attackers to cause a denial of service crash via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload...

RHEL 4 : wireshark (RHSA-2007:0709)

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

wireshark security update

CentOS Errata and Security Advisory CESA-2007:0709 New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the...

Low: Red Hat Security Advisory: wireshark security and bug fix update

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

Security fix for the ALT Linux 9 package wireshark version 0.99.6-alt1

July 6, 2007 Sir Raorn 0.99.6-alt1 - 0.99.6 + CVE-2007-3389 + CVE-2007-3390 + CVE-2007-3391 + CVE-2007-3392 + CVE-2007-3393...

[SECURITY] [DSA 1322-1] New wireshark packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1322-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 27th, 2007 http://www.debian.org/security/faq -...