100 matches found
Medium: golang, docker
Issue Overview: As discussed upstream -- http://seclists.org/oss-sec/2015/q3/294 and http://seclists.org/oss-sec/2015/q3/237 -- the Go project received notification of an HTTP request smuggling vulnerability in the net/http library. Invalid headers are parsed as valid headers like "Content Length...
Fedora 22 : golang-1.4.2-3.fc22 (2015-13002)
security fixes for net/http smuggling Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
CVE-2014-5740
The CVE-2014-5740 entry concerns the Android app Security - Free (com.webroot.security) version 3.6.0.6610. Affected component: SSL certificate verification in the app’s network stack; root cause is failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers an...
Oracle Linux 4 : wireshark (ELSA-2006-0726 / ELSA-2006-0658 / ELSA-2006-0602)
New Wireshark packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Users of Wireshark should upgrade to these updated packag...
PHP 5.2.x < 5.2.17 / 5.3.x < 5.3.5 String To Double Conversion DoS
Binary data 5740.prm...
SLES9: Security update for ethereal
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018978 within the Su...
CentOS 3 / 4 : wireshark (CESA-2006:0726)
New Wireshark packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Several flaws were found in Wireshark's HTTP, WBXML, LDAP...
CVE-2008-2569
creationtimestamp| type| source ---|---|--- 2008-06-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5740...
[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1398-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 05, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1398-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 05, 2007 http://www.debian.org/security/faq -...
CVE-2007-5740
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...
CVE-2007-5740
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...
CVE-2007-5740
CVE-2007-5740 affects Perdition, a IMAP proxy component; the vulnerability is a format string error in Perdition’s IMAP output handling (IMAPD) that could allow an unauthenticated remote attacker to execute arbitrary code. Impact: remote code execution on the Perdition server via a specially craf...
openSUSE 10 Security Update : ethereal (ethereal-2246)
Various problems have been fixed in the network analyzer Ethereal, most leading to crashes of the ethereal program. CVE-2006-5740: A unspecified vulnerability in the LDAP dissector could be used to crash Ethereal. CVE-2006-4574: A single \0 byte heap overflow was fixed in the MIME multipart...
RHEL 4 : wireshark (RHSA-2006:0726)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2006:0726 advisory. - security flaw CVE-2006-4574, CVE-2006-4805, CVE-2006-5468, CVE-2006-5469, CVE-2006-5740 Note that Nessus has not tested for these issues b...
wireshark security update
CentOS Errata and Security Advisory CESA-2006:0726-01 New Wireshark packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic...
CVE-2006-5470
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-5740. Reason: This candidate is a duplicate of CVE-2006-5740 due to a typo. Notes: All CVE users should reference CVE-2006-5740 instead of this candidate. All references and descriptions in this candidate have been removed to...
DEBIAN-CVE-2006-5740
Unspecified vulnerability in the LDAP dissector in Wireshark formerly Ethereal 0.99.3 allows remote attackers to cause a denial of service crash via a crafted LDAP packet...
CVE-2006-5740
CVE-2006-5740 is an issue in Wireshark’s LDAP dissector (Wireshark, 0.99.3) that allows remote attackers to cause a denial of service (crash) through a crafted LDAP packet. The initial description cites this vulnerability, but the provided connected documents do not specify a patch version or con...
