124 matches found
SuSE 10 Security Update : wireshark (ZYPP Patch Number 7438)
Wireshark was updated to version 1.4.4 to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57261;...
SuSE 11.1 Security Update : rsync (SAT Patch Number 4300)
Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer client side or server that allows to push CVE-2011-1097. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-1)
Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995,...
openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-2)
Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995,...
SuSE 10 Security Update : wireshark (ZYPP Patch Number 7439)
Wireshark was updated to version 1.4.4 to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53319;...
CVE-2010-4300
creationtimestamp| type| source ---|---|--- 2010-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15676...
Mandriva Update for wireshark MDVSA-2010:242 (wireshark)
Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2010:242 wireshark Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Mandriva Update for wireshark MDVSA-2010:242 (wireshark)
Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2010:242 wireshark Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
RHEL 6 : wireshark (RHSA-2010:0924)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0924 advisory. - wireshark: stack overflow in BER dissector CVE-2010-3445 - Wireshark: Heap-based buffer overflow in LDSS dissector CVE-2010-4300 Note that...
DEBIAN-CVE-2010-4300
Heap-based buffer overflow in the dissectldsstransfer function epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an LDSS packet with a lon...
CVE-2010-4300
Heap-based buffer overflow in the dissectldsstransfer function epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an LDSS packet with a lon...
CVE-2010-4300
CVE-2010-4300 is a heap-based buffer overflow in Wireshark’s LDSS dissector (dissect_ldss_transfer in epan/dissectors/packet-ldss.c) affecting Wireshark 1.2.0–1.2.12 and 1.4.0–1.4.1. A crafted LDSS packet with a long digest line can trigger memory corruption, enabling a crash and potentially code...
openSUSE Security Update : moodle (moodle-1933)
This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...
openSUSE Security Update : moodle (moodle-1933)
This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...
CVE-2009-4300
Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors...
CVE-2009-4300
The CVE-2009-4300 issue affects Moodle 1.8 (before 1.8.11) and Moodle 1.9 (before 1.9.7). The vulnerability stems from how multiple authentication plugins store password hashes: MD5 hashes are stored in the user table even when cached hashes are not used, which can facilitate credential disclosur...
Fedora Core 12 FEDORA-2009-13065 (moodle)
The remote host is missing an update to moodle announced via advisory FEDORA-2009-13065. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Fedora Core 11 FEDORA-2009-13080 (moodle)
The remote host is missing an update to moodle announced via advisory FEDORA-2009-13080. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
CVE-2008-4300
CVE-2008-4300 affects a specific ActiveX control in adsiis.dll used by Microsoft Internet Information Services (IIS). The vulnerability allows remote attackers to cause a denial of service (browser crash) by sending a long string as the second argument to the GetObject method. The description not...