78 matches found
SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 10.3)
The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...
openSUSE 10 Security Update : wireshark (wireshark-5886)
This update fixes problems that could crash wireshark when processing compressed data and when processing rf5 files CVE-2008-3933, CVE-2008-3934 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4683 Bluetooth ACL dissector crash, CVE-2008-4684...
Debian: Security Advisory (DSA-1673-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 10 Security Update : wireshark (wireshark-5783)
This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4683 Bluetooth ACL dissector crash, CVE-2008-4684 PRP and MATE dissector crash and CVE-2008-46...
Debian DSA-1673-1 : wireshark - several vulnerabilities
Several remote vulnerabilities have been discovered in network traffic analyzer Wireshark. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3137 The GSM SMS dissector is vulnerable to denial of service. - CVE-2008-3138 The PANA and KISMET dissectors...
DSA-1673-1 wireshark - several vulnerabilities
Bulletin has no description...
Security fix for the ALT Linux 9 package wireshark version 1.0.4-alt1
Oct. 24, 2008 Sir Raorn 1.0.4-alt1 - 1.0.4 + CVE-2008-4685 + CVE-2008-4684 + CVE-2008-4683 + CVE-2008-4682 + CVE-2008-4681 + CVE-2008-4680...
CVE-2008-4685
CVE-2008-4685 is a use-after-free vulnerability in the Q.931 dissector (packet-q931.c) of Wireshark, affecting versions 0.10.3 through 1.0.3. The issue occurs in the dissect_q931_cause_ie function and allows a remote attacker to trigger an exception via certain packets, leading to a denial of ser...
CVE-2008-4685
Use-after-free vulnerability in the dissectq931causeie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via certain packets that trigger an exception...
CVE-2008-4685
Use-after-free vulnerability in the dissectq931causeie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via certain packets that trigger an exception...
CVE-2007-4685
CVE-2007-4685 affects Apple Mac OS X 10.4–10.4.10. Local users can gain privileges by executing setuid/setgid programs whose stdio/stderr/stdout descriptors are in an unexpected state. The issue is mitigated by upgrading to Mac OS X 10.4.11 (Security Update 2007-008) as released by Apple; patch d...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
CVE-2006-4685
Summary (CVE-2006-4685) The XMLHTTP ActiveX control in MSXML/MSXML Core Services (versions 2.6, 3.0–6.0) incorrectly handles server-side redirects, enabling remote, user-assisted access to content from other domains. This information-disclosure vulnerability can let an attacker read cookies or da...
CVE-2005-4685
The CVE-2005-4685 entry describes a cookie handling flaw in Firefox/Mozilla where, if the DNS resolver uses a non-root domain in its search list, a cookie can be associated with multiple domains or stolen for an expanded hostname. Exploitation involves a user-entered hostname being expanded via t...
CVE-2005-4685
Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a...