openSUSE Security Update : wireshark (openSUSE-SU-2012:1067-1)

Wireshark was updated to 1.8.2 : - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The MongoDB dissector could go into a large loop. wnpa-sec-2012-14 CVE-2012-4287 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The ERF...

Fedora 20 : libvirt-1.1.3-2.fc20 (2013-18455)

Allow QoS change with update-device bz 1014200 - Fix nwfilter crash during firewalld install bz 1014762 - Fix crash with nographics bz 1014088 Update to 1.1.3 release - Sync with v1.1.2-maint - Rebuild for libswan soname bump bz 1009701 - CVE-2013-4311: Insecure polkit usage bz 1009539, bz...

CVE-2013-4297

The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users to cause a denial of service uninitialized pointer dereference and crash via unspecified vectors...

CVE-2013-4297

The CVE-2013-4297 issue affects libvirt up to version 1.1.2, where the virFileNBDDeviceAssociate function in util/virfile.c can trigger a denial of service via an uninitialized pointer dereference when accessed by remote, authenticated users. The vectors are unspecified in the provided documents....

Mandriva Linux Security Advisory : wireshark (MDVSA-2012:134)

Multiple vulnerabilities was found and corrected in Wireshark : The DCP ETSI dissector could trigger a zero division CVE-2012-4285. The MongoDB dissector could go into a large loop CVE-2012-4287. The XTP dissector could go into an infinite loop CVE-2012-4288. The AFP dissector could go into a lar...

Fedora Update for wireshark FEDORA-2012-12085

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities

The installed version of Wireshark is 1.8.x before 1.8.2. This version is affected by the following vulnerabilities : - The 'DCP ETSI' dissector and 'pcap-ng' parser can attempt a divide by zero operation leading to an application crash. CVE-2012-4285, CVE-2012-4286 - The 'MongoDB', 'XTP', 'AFP',...

CVE-2012-4297

Wireshark GSM RLC MAC dissector (epan/dissectors/packet-gsm_rlcmac.c) contains a buffer overflow in dissect_gsm_rlcmac_downlink, affecting Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2. A malformed packet can allow a remote attacker to execute arbitrary code. Remediation: upgrade to a non-...

CVE-2011-4297

CVE-2011-4297 affects Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1. The flaw in the file comment/lib.php fails to properly restrict comment capabilities, allowing remote attackers to post a comment by leveraging the guest role on a front-page activity. The available connected documents confir...

VMware Products Local Privilege Escalation Vulnerability (VMSA-2010-0018) - Linux

VMware products are prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Products Local Privilege Escalation Vulnerability (VMSA-2010-0018) - Windows

VMWare products are prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bonsai Information Security - VMware Tools update OS Command Injection

VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Y...

VMware Tools update OS Command Injection

Exploit for multiple platform in category remote exploits ======================================== VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware...

VMware Tools - Update OS Command Injection

VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Y...

VMware Tools - Update OS Command Injection

VMware Tools - Update OS Command Injection VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Informati...

VMware Tools Update OS Command Injection

VMware Tools update OS Command Injection ======================================== 1. Advisory Information Advisory ID: BONSAI-2010-0110 Date published: Thu Dec 9, 2010 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Y...

VMware Fusion < 3.1.2 (VMSA-2010-0018)

The version of VMware Fusion installed on the Mac OS X host is earlier than 3.1.2. Such versions are affected by three security issues : - A race condition in the mounting process in vmware-mount in allows host OS users to gain privileges via vectors involving temporary files. CVE-2010-4295 - The...

CVE-2010-4297

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2...

CVE-2010-4297

CVE-2010-4297 describes an OS command injection flaw in the VMware Tools update functionality that affects multiple VMware products (Workstation, Player, Fusion, ESXi/ESX/Server, etc.). The root cause is improper validation of user-supplied input during tool update, allowing a local host user to ...

CVE-2010-4297

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2...