84 matches found
CVE-2012-4078
The Cisco UCS Baseboard Management Controller (BMC) is affected by a vulnerability due to improper filtering of SSH escape sequences, allowing an authenticated, remote attacker to bypass part of the authentication via SSH port forwarding and access services with elevated privileges. The issue (Bu...
SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8044 / 8045)
This wireshark version update to 1.8.8 includes several security and general bug fixes. Version update to 1.8.8 bnc824900 : - vulnerabilities fixed : - The CAPWAP dissector could crash. wnpa-sec-2013-32. CVE-2013-4074 - The GMR-1 BCCH dissector could crash. wnpa-sec-2013-33. CVE-2013-4075 - The P...
MGASA-2013-0181 Updated wireshark packages fix multiple security vulnerabilities
The CAPWAP dissector could crash CVE-2013-4074. The GMR-1 BCCH dissector could crash CVE-2013-4075. The PPP dissector could crash CVE-2013-4076. The NBAP dissector could crash CVE-2013-4077. The RDP dissector could crash CVE-2013-4078. The GSM CBCH dissector could crash CVE-2013-4079. The Assa...
CVE-2013-4078
epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service application crash via a crafted packet...
CVE-2013-4078
Wireshark 1.8.x before 1.8.8 has a flaw in the RDP dissector (epan/dissectors/packet-rdp.c) where return values are not validated during data-availability checks, enabling a crafted RDP packet to crash the application and cause a denial of service. This CVE-2013-4078 entry is supported by multipl...
Wireshark Multiple Vulnerabilities (Jun 2013) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Wireshark Multiple Vulnerabilities - June 13 (Windows)
This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnjun13win.nasl 6104 2017-05-11 09:03:48Z teissa $ Wireshark Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone...
CVE-2011-4078
include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...
CVE-2011-4078
include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...
CVE-2011-4078
include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...
CVE-2011-4078
CVE-2011-4078 affects Roundcube Webmail
Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-1071-1
Ubuntu Update for Linux kernel vulnerabilities USN-1071-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10711.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-1071-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
Debian Security Advisory DSA 2126-1 (linux-2.6)
The remote host is missing an update to linux-2.6 announced via advisory DSA 2126-1. OpenVAS Vulnerability Test $Id: deb21261.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2126-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
CVE-2010-4078
CVE-2010-4078 affects the Linux kernel before 2.6.36-rc6, where the sisfb_ioctl function in drivers/video/sis/sis_main.c fails to properly initialize a structure member. This allows local users to leak potentially sensitive information from kernel stack memory via the FBIOGET_VBLANK ioctl. Connec...
CVE-2009-4078
Multiple cross-site scripting XSS vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4078
CVE-2009-4078 affects Redmine 0.8.5 and earlier, due to multiple cross-site scripting (XSS) vulnerabilities. An attacker can cause a user’s browser to execute arbitrary script, potentially leaking cookies and enabling session hijacking. The underlying issue is XSS in Redmine’s web UI, with vector...
CVE-2008-4078
SQL injection vulnerability in the AR/AP transaction report in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-4078
SQL injection vulnerability in the AR/AP transaction report in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-4078
SQL injection vulnerability in the AR/AP transaction report in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...