Internet Bug Bounty: CVE-2017-5341 The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print()

Reported to the project maintainers in 2016. The function sigprint did receive a correct caplen parameter value but didn't use it correctly which could cause a read outside of buffer. Fixed by https://github.com/the-tcpdump-group/tcpdump/commit/409ffe94529df3d8bb8258bf99586f821756cb29...

CVE-2017-5341

CVE-2017-5341 affects the tcpdump OTV parser. The vulnerability is a buffer overflow in print-otv.c:otv_print() present in tcpdump versions before 4.9.0. A remote attacker could craft packets to trigger the overflow, potentially crashing tcpdump or, in the worst case, executing arbitrary code on ...

CVE-2017-5341

The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...

CVE-2017-5341

The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...

CVE-2016-5341

CVE-2016-5341 : Denial-of-service in the Android GPS component caused by spoofed xtra.bin/xtra2.bin files. The issue affects Android GPS logic prior to 2016-12-05, allowing a remote attacker (via a spoofed Qualcomm hosting domain) to trigger GPS signal-acquisition delays, potentially causing devi...

Wowza Streaming Engine 4.5.0 - Cross-Site Request Forgery (Add Advanced Admin)

Wowza Streaming Engine 4.5.0 - Cross-Site Request Forgery Add Advanced Admin input type...

Wowza Streaming Engine 4.5.0 Cross Site Request Forgery

i? Wowza Streaming Engine 4.5.0 CSRF Add Advanced Admin Exploit Vendor: Wowza Media Systems, LLC. Product web page: https://www.wowza.com Affected version: 4.5.0 build 18676 Platform: JSP Summary: Wowza Streaming Engine is robust, customizable, and scalable server software that powers reliable...

Fedora 22 : moodle-2.8.9-1.fc22 (2015-2ebdd4ad8f)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 23 : moodle-2.9.3-1.fc23 (2015-98fc0d20ad)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2015-5341

modscorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors...

CVE-2015-5341

The CVE-2015-5341 issue affects Moodle’s mod_scorm component. Affected versions: Moodle 2.6.11; 2.7.x before 2.7.11; 2.8.x before 2.8.9; and 2.9.x before 2.9.3. Root cause: mod_scorm mishandles availability dates, allowing remote authenticated users to bypass intended access restrictions and read...

Fedora Update for moodle FEDORA-2015-2

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2015-1357

Name of the Vulnerable Software and Affected Versions AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems version 1.0.2.0 and earlier Description The issue is caused by a stack-based buffer overflow in the firmware of the affected devices, allowin...

CVE-2015-2797: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login...

CVE-2014-5341

The CVE-2014-5341 issue affects the ownCloud Server SFTP external storage driver (files_external) prior to version 6.0.5. The root cause is improper RSA host key validation after login, enabling potential information disclosure via network sniffing (MITM-like exposure). Exploitation details are s...

CVE-2012-5341

CVE-2012-5341 affects Otterware StatIt 4, where statistik.php is vulnerable to XSS via (1) action, (2) show in stat_tld, or (3) order in stat_abfragen, allowing remote script/HTML injection. Exploitation details are not provided in the supplied documents; no remediation is listed here.

Novell eDirectory < 8.8 SP5 Patch 3 eMBox SOAP Request DoS

Binary data 5341.prm...

VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third-party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...

SLES11: Security update for IBM Java 1.6.0

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-160-ibm java-160-ibm-alsa java-160-ibm-fonts java-160-ibm-jdbc java-160-ibm-plugin More details may also be found by searching for the SuSE Enterprise...

SLES9: Security update for IBM Java5 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-JRE IBMJava5-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...