105 matches found
MS14-054: Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (2988948)
The remote Windows host is affected by a privilege escalation vulnerability. The vulnerability is due to improperly conducted integrity checks on tasks by Windows Task Scheduler. An authenticated attacker can exploit this vulnerability to execute arbitrary code in the context of the local system...
Wireshark CAPWAP Dissector - Denial of Service (msf)
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Udp include Msf::Auxiliary::Dos def initializeinfo =...
Wireshark CAPWAP Dissector Denial Of Service
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wireshark CAPWAP Dissector DoS', 'Description' = %q This module inject a malicious udp packet to crash Wireshark 1.8.0 to 1.8.7 and...
CVE-2013-4074
creationtimestamp| type| source ---|---|--- 2014-05-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33556 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/wireshark/capwap.rb 2025-02-06 03:13:41+00:00| seen|...
Wireshark CAPWAP Dissector - Denial of Service (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wireshark CAPWAP Dissector DoS', 'Description' = %q This module inject a malicious udp packet to crash Wireshark 1.8.0 to 1.8.7 and...
Wireshark CAPWAP Dissector DoS
This module injects a malformed UDP packet to crash Wireshark and TShark 1.8.0 to 1.8.7, as well as 1.6.0 to 1.6.15. The vulnerability exists in the CAPWAP dissector which fails to handle a packet correctly when an incorrect length is given. This module requires Metasploit:...
Cisco Unified Computing System Serial over LAN Static Private Key Vulnerability (CSCte90338)
A vulnerability in the Cisco Unified Computing System Serial over LAN SoL implementation could allow an unauthenticated, remote attacker to perform a man-in-the-middle MITM attack. The vulnerability occurs because the Board Management Controller BMC uses a hard-coded private key. An attacker coul...
Fedora Update for wireshark FEDORA-2013-17661
Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2013-17661 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
CVE-2012-4074
The Board Management Controller BMC in the Serial over LAN SoL subsystem in Cisco Unified Computing System UCS relies on a hardcoded private key, which allows man-in-the-middle attackers to obtain sensitive information or modify the data stream by leveraging knowledge of this key, aka Bug ID...
CVE-2012-4074
The CVE-2012-4074 issue affects Cisco Unified Computing System Serial over LAN (SoL) with the Board Management Controller (BMC) using a hard-coded private key. This enables unauthenticated MITM attacks on SoL connections, allowing an attacker to view or modify SoL communications. Root cause: hard...
SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8044 / 8045)
This wireshark version update to 1.8.8 includes several security and general bug fixes. Version update to 1.8.8 bnc824900 : - vulnerabilities fixed : - The CAPWAP dissector could crash. wnpa-sec-2013-32. CVE-2013-4074 - The GMR-1 BCCH dissector could crash. wnpa-sec-2013-33. CVE-2013-4075 - The P...
MGASA-2013-0181 Updated wireshark packages fix multiple security vulnerabilities
The CAPWAP dissector could crash CVE-2013-4074. The GMR-1 BCCH dissector could crash CVE-2013-4075. The PPP dissector could crash CVE-2013-4076. The NBAP dissector could crash CVE-2013-4077. The RDP dissector could crash CVE-2013-4078. The GSM CBCH dissector could crash CVE-2013-4079. The Assa...
[ MDVSA-2013:172 ] wireshark
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:172 http://www.mandriva.com/en/support/security/ Package : wireshark Date : June 12, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and...
CVE-2013-4074
The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service application crash via a...
CVE-2013-4074
CVE-2013-4074 affects Wireshark CAPWAP dissector: CAPWAP data handling in epan/dissectors/packet-capwap.c treats -1 as an error value, enabling remote crafted packets to crash the application. Affected are Wireshark 1.6.x prior to 1.6.16 and 1.8.x prior to 1.8.8. Remediation: upgrade to the fixed...
Fedora Update for phpldapadmin FEDORA-2011-14924
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 14 : phpldapadmin-1.2.1.1-2.20111006git.fc14 (2011-14986)
Update to the latest upstream development code to fix CVE-2011-4074 and CVE-2011-4075 XSS and code injection vulnerabilities in versions = 1.2.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 15 : phpldapadmin-1.2.1.1-2.20111006git.fc15 (2011-14993)
Update to the latest upstream development code to fix CVE-2011-4074 and CVE-2011-4075 XSS and code injection vulnerabilities in versions = 1.2.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 16 : phpldapadmin-1.2.1.1-2.20111006git.fc16 (2011-14924)
Update to the latest upstream development code to fix CVE-2011-4074 and CVE-2011-4075 XSS and code injection vulnerabilities in versions = 1.2.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora Update for phpldapadmin FEDORA-2011-14993
Check for the Version of phpldapadmin OpenVAS Vulnerability Test Fedora Update for phpldapadmin FEDORA-2011-14993 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...