123 matches found
Amazon Linux: Security Advisory (ALAS-2013-251)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-4285
Cisco IOS XR LPTS (Local Packet Transport Services) on ASR9k devices running 5.1.2, 5.1.3, 5.2.1, or 5.2.2 can improperly open TCP/UDP ports during flow-base entry processing, enabling a remote attacker to exhaust resources and cause a DoS. Root cause: incorrect handling in LPTS flow-base process...
CVE-2014-4285
Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Reports Configuration...
CVE-2014-4285
Technical details for CVE-2014-4285 are not publicly available in the provided documents. The entry describes an unspecified vulnerability in Oracle E-Business Suite 11.5.10.2 related to Reports Configuration. Monitor for updates from Oracle and security advisories.
openSUSE Security Update : wireshark (openSUSE-SU-2012:1067-1)
Wireshark was updated to 1.8.2 : - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The MongoDB dissector could go into a large loop. wnpa-sec-2012-14 CVE-2012-4287 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The ERF...
openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)
wireshark was updated to 1.4.15 - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The AFP dissector could go into a large loop. wnpa-sec-2012-17 CVE-2012-4289 - The RTPS2...
CVE-2013-4285
The CVE concerns Gentoo’s patch to the PAM S/Key module that fails to clear credentials from memory. A local attacker with privileged access could inspect memory dumps to obtain cleartext credentials. Affected software is the PAM S/Key module used by Gentoo; the underlying issue is that credentia...
Amazon Linux AMI : wireshark (ALAS-2013-251)
Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2013-3559 , CVE-2013-4083 Several denial of service flaws were found in Wireshark. Wireshar...
Oracle Linux 5 : wireshark (ELSA-2013-0125)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0125 advisory. - fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290 849521 - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958...
SuSE 10 Security Update : wireshark (ZYPP Patch Number 8267)
wireshark was updated to 1.4.15 to fix multiple security issues. Issues fixed : - fix bnc776038CVE-2012-4285 / CVE-2012-4288 / CVE-2012-4289 / CVE-2012-4296 / CVE-2012-4291 / CVE-2012-4292 / CVE-2012-4293 / CVE-2012-4290, bnc772738 CVE-2012-4048 / CVE-2012-4049fixed upstream - Security fixes: o...
Mandriva Linux Security Advisory : wireshark (MDVSA-2012:134)
Multiple vulnerabilities was found and corrected in Wireshark : The DCP ETSI dissector could trigger a zero division CVE-2012-4285. The MongoDB dissector could go into a large loop CVE-2012-4287. The XTP dissector could go into an infinite loop CVE-2012-4288. The AFP dissector could go into a lar...
Fedora Update for wireshark FEDORA-2012-12085
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities
The installed version of Wireshark is 1.8.x before 1.8.2. This version is affected by the following vulnerabilities : - The 'DCP ETSI' dissector and 'pcap-ng' parser can attempt a divide by zero operation leading to an application crash. CVE-2012-4285, CVE-2012-4286 - The 'MongoDB', 'XTP', 'AFP',...
Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.15 advisory. - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6...
DEBIAN-CVE-2012-4285
The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...
CVE-2012-4285
Wireshark vulnerability CVE-2012-4285 affects the DCP ETSI dissector: in Wireshark 1.4.x < 1.4.15, 1.6.x < 1.6.10, and 1.8.x
CVE-2012-4285
The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...
CVE-2011-4285
The vulnerability CVE-2011-4285 affects Moodle 2.0.x before 2.0.2. The default configuration incorrectly grants the moodle/course:delete capability, enabling remote authenticated users (via the teacher role) to delete arbitrary courses. The connected sources confirm the root cause is the misconfi...
CVE-2008-4285
Unspecified vulnerability in the Performance Monitoring Infrastructure PMI feature in the Servlet Engine/Web Container component in IBM WebSphere Application Server WAS 6.1.x before 6.1.0.19, when a component statistic is enabled, allows attackers to cause a denial of service daemon crash via...
CVE-2008-4285
CVE-2008-4285 affects IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19, specifically the Servlet Engine/Web Container PMI feature. When a component statistic is enabled, it allows a denial of service (daemon crash) via vectors described as a gradual degradation in performance. No expl...