CVE-2006-4331

Affected software: Wireshark (formerly Ethereal). Vulnerability: off-by-one in the IPsec ESP decryption preference parser (CVE-2006-4331) that can cause a remote denial of service (crash). Impact/scope: described as a remote crash when parsing malformed packets; listed for Ethereal/Wireshark 0.99...

CVE-2005-4331

The CVE-2005-4331 entry describes a SQL injection vulnerability in the iHTML Merchant Version 2 Pro product, specifically in merchant.ihtml. The vulnerability allows remote attackers to execute arbitrary SQL commands through the (1) step, (2) id, and (3) pid parameters. This is evidenced by the N...