Gentoo Security Advisory GLSA 200607-09 (wireshark ethereal)

The remote host is missing updates announced in advisory GLSA 200607-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200607-09 (wireshark ethereal)

The remote host is missing updates announced in advisory GLSA 200607-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3631

Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application...

CVE-2008-3631

Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application...

CVE-2008-3631

CVE-2008-3631 affects Apple iPod touch/iPhone 2.0 era. The Application Sandbox fails to properly isolate third‑party applications, allowing a malicious or compromised third‑party app to read arbitrary files in another third‑party sandbox. Root cause: inadequate sandbox isolation between third‑par...

Debian: Security Advisory (DSA-1127)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 1930)

This update fixes several security related bugs ranging from crashes to arbitrary code execution. CVE-2006-3627 / CVE-2006-3628 / CVE-2006-3629 / CVE-2006-3630 / CVE-2006-3631 / CVE-2006-3632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE 10 Security Update : ethereal (ethereal-1932)

This update fixes several security related bugs ranging from crashes to arbitrary code execution. CVE-2006-3627, CVE-2006-3628, CVE-2006-3629, CVE-2006-3630, CVE-2006-3631, CVE-2006-3632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

CVE-2007-3631

CVE-2007-3631 affects GameSiteScript (gss) 3.1 and earlier. The vulnerability is an SQL injection in index.php triggered via the params parameter due to missing input validation of the id field. This can allow remote attackers to execute arbitrary SQL commands. According to NVD, the CVSS v2 base ...

Debian DSA-1127-1 : ethereal - several vulnerabilities

Several remote vulnerabilities have been discovered in the Ethereal network sniffer, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3628 Ilja van Sprundel discovered that the FW-1 and MQ dissectors...

CentOS 3 / 4 : wireshark (CESA-2006:0602)

New Wireshark packages that fix various security vulnerabilities in Ethereal are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. In May 2006, Ethereal changed its name to...

wireshark security update

CentOS Errata and Security Advisory CESA-2006:0602 New Wireshark packages that fix various security vulnerabilities in Ethereal are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network...

CVE-2006-3631

Unspecified vulnerability in the SSH dissector in Wireshark aka Ethereal 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service infinite loop via unknown attack vectors...

DEBIAN-CVE-2006-3631

Unspecified vulnerability in the SSH dissector in Wireshark aka Ethereal 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service infinite loop via unknown attack vectors...

CVE-2006-3631

Wireshark/Ethereal SSH dissector (affecting 0.9.10–0.99.0) contains a vulnerability that can be exploited remotely to trigger an infinite loop, causing a denial of service. The issue is tied to CVE-2006-3631. Some connected advisories note fixes in Wireshark upgrades (e.g., to 0.99.4) or newer, a...

Security fix for the ALT Linux 9 package wireshark version 0.99.2-alt1

July 18, 2006 Sir Raorn 0.99.2-alt1 - 0.99.2 + CVE-2006-3627 + CVE-2006-3628 + CVE-2006-3628 + CVE-2006-3628 + CVE-2006-3628 + CVE-2006-3629 + CVE-2006-3630 + CVE-2006-3628 + CVE-2006-3631 + CVE-2006-3632 - Renaamed from ethereal to wireshark, added Obsoletes - Rediffed all patches - Updated...

CentOS 4 : udev (CESA-2005:864)

Updated udev packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The udev package contains an implementation of devfs in userspace using sysfs and /sbin/hotplug. Richard Cunningham discovered a...

RHEL 4 : udev (RHSA-2005:864)

Updated udev packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The udev package contains an implementation of devfs in userspace using sysfs and /sbin/hotplug. Richard Cunningham discovered a...

CVE-2005-3631

udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords...

CVE-2005-3631

The CVE-2005-3631 issue affects udev, where permissions on certain files under /dev/input were not set correctly. The root cause is flawed permission handling in udev, allowing a local attacker to potentially view sensitive data entered at the console (e.g., passwords). Public references in Red H...