83 matches found
SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 10.3)
The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...
openSUSE 10 Security Update : wireshark (wireshark-5886)
This update fixes problems that could crash wireshark when processing compressed data and when processing rf5 files CVE-2008-3933, CVE-2008-3934 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4683 Bluetooth ACL dissector crash, CVE-2008-4684...
Debian: Security Advisory (DSA-1673-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 10 Security Update : wireshark (wireshark-5783)
This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4683 Bluetooth ACL dissector crash, CVE-2008-4684 PRP and MATE dissector crash and CVE-2008-46...
Debian DSA-1673-1 : wireshark - several vulnerabilities
Several remote vulnerabilities have been discovered in network traffic analyzer Wireshark. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3137 The GSM SMS dissector is vulnerable to denial of service. - CVE-2008-3138 The PANA and KISMET dissectors...
DSA-1673-1 wireshark - several vulnerabilities
Bulletin has no description...
Security fix for the ALT Linux 9 package wireshark version 1.0.4-alt1
Oct. 24, 2008 Sir Raorn 1.0.4-alt1 - 1.0.4 + CVE-2008-4685 + CVE-2008-4684 + CVE-2008-4683 + CVE-2008-4682 + CVE-2008-4681 + CVE-2008-4680...
CVE-2008-4684
packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service application crash via a certain series of packets, as demonstrated by enabling the 1 PRP or 2 MATE post dissector...
CVE-2008-4684
packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service application crash via a certain series of packets, as demonstrated by enabling the 1 PRP or 2 MATE post dissector...
CVE-2008-4684
CVE-2008-4684 affects Wireshark 0.99.2–1.0.3 where the packet-frame handler does not correctly cope with exceptions raised by post dissectors, allowing remote attackers to crash the application via a crafted packet sequence and enabling the (1) PRP or (2) MATE post dissectors. The connected docum...
CVE-2007-4684
CVE-2007-4684 is a local kernel vulnerability in Apple Mac OS X 10.4–10.4.10 where the i386_set_ldt system call can overflow a single byte in num_sels, enabling local arbitrary code execution. Exploitation was demonstrated on Mac OS X 10.4.11-era builds via a local access path; references note an...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
Debian DSA-1176-1 : zope2.7 - programming error
It was discovered that the Zope web application server does not disable the csvtable directive in web pages containing ReST markup, allowing the exposure of files readable by the Zope server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
CVE-2006-4684
The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...
CVE-2006-4684
The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...
CVE-2006-4684
CVE-2006-4684 details (Zope/Zope2, docutils integration): Affects Zope 2.7.0–2.7.9 and 2.8.0–2.8.8. The vulnerability stems from improper handling of reStructuredText (reST) in web pages, allowing a remote attacker to read arbitrary files via a csv_table directive. CVSSv2 base metrics reported: A...
[SECURITY] [DSA 1176-1] New zope2.7 packages fix information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1176-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 13th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1176-1] New zope2.7 packages fix information disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 1176-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 13th, 2006 http://www.debian.org/security/faq -...
CVE-2005-4684
The vulnerability CVE-2005-4684 affects Konqueror and is caused by the DNS resolver handling a non-root domain in its search list, enabling a cookie to be associated with multiple domains or an attacker to steal cookies for an expanded hostname. The evidence in connected documents confirms the is...