79 matches found
openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)
wireshark was updated to 1.4.15 - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The AFP dissector could go into a large loop. wnpa-sec-2012-17 CVE-2012-4289 - The RTPS2...
openSUSE Security Update : wireshark (openSUSE-SU-2012:1067-1)
Wireshark was updated to 1.8.2 : - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The MongoDB dissector could go into a large loop. wnpa-sec-2012-14 CVE-2012-4287 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The ERF...
FreeBSD : openjpeg -- Multiple vulnerabilities (02db20d7-e34a-11e3-bd92-bcaec565249c)
Openjpeg release notes report : That CVE-2012-3535 and CVE-2012-3358 are fixed in the 1.5.1 release. That CVE-2013-4289, CVE-2013-4290, CVE-2013-1447, CVE-2013-6045, CVE-2013-6052, CVE-2013-6054, CVE-2013-6053, CVE-2013-6887, where fixed in the 1.5.2 release. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2013-4289
OpenJPEG is affected by CVE-2013-4289 due to multiple integer overflows in lib/openjp3d/jp3d.c, which can cause a heap-based buffer overflow. Affected version: OpenJPEG prior to 1.5.2. Root cause: integer overflow in JP3D handling. Impact: remote attacker could trigger overflow; exact consequence...
Amazon Linux AMI : wireshark (ALAS-2013-251)
Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2013-3559 , CVE-2013-4083 Several denial of service flaws were found in Wireshark. Wireshar...
Oracle Linux 5 : wireshark (ELSA-2013-0125)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0125 advisory. - fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290 849521 - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958...
Mandriva Linux Security Advisory : wireshark (MDVSA-2012:134)
Multiple vulnerabilities was found and corrected in Wireshark : The DCP ETSI dissector could trigger a zero division CVE-2012-4285. The MongoDB dissector could go into a large loop CVE-2012-4287. The XTP dissector could go into an infinite loop CVE-2012-4288. The AFP dissector could go into a lar...
Fedora Update for wireshark FEDORA-2012-12085
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.15 advisory. - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6...
Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities
The installed version of Wireshark is 1.8.x before 1.8.2. This version is affected by the following vulnerabilities : - The 'DCP ETSI' dissector and 'pcap-ng' parser can attempt a divide by zero operation leading to an application crash. CVE-2012-4285, CVE-2012-4286 - The 'MongoDB', 'XTP', 'AFP',...
CVE-2012-4289
epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...
CVE-2012-4289
epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...
CVE-2012-4289
CVE-2012-4289 affects Wireshark’s AFP dissector. In Wireshark 1.4.x < 1.4.15, 1.6.x < 1.6.10, and 1.8.x
CVE-2011-4289
CVE-2011-4289 – Moodle 2.0.x before 2.0.3 : The vulnerability arises because Moodle does not recognize the configuration that restricts email addresses to course members. As a result, remote authenticated users can read full profile pages and obtain sensitive address information. The description ...
Sql injection
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...
Solaris 10 (sparc) : 121913-20 (deprecated)
Portal Server 7.0: Miscellaneous Fixes. Date this patch was last updated by Sun : Jun/26/09 This plugin has been deprecated and either replaced with individual 121913 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...
CVE-2007-4289
The connected records indicate CVE-2007-4289 is related to improper handling of XSLT stylesheets in XML signatures, affecting Sun Java System Access Manager 6.3–7.1 and Sun Java System Identity Server 6.1–6.2, where crafted XSLT transforms could allow context-dependent attackers to execute arbitr...
CVE-2006-4289
CVE-2006-4289 describes a buffer overflow in Sony VAIO Media Server versions 2.x–5.x prior to 20060626 that allows remote attackers to execute arbitrary code via unspecified vectors. The connected documents present the same description without concrete exploit details, affected product scope is l...
CVE-2005-4289
The CVE-2005-4289 entry describes a Cross‑site Scripting (XSS) vulnerability in EDCstore.pl of eDatCat 0.3. The flaw allows remote attackers to inject arbitrary web script or HTML via the user_action parameter. According to NVD, the impact is Partial Integrity with No Confidentiality or Availabil...