Fedora 19 : wireshark-1.10.3-3.fc19 (2013-20985)

fix subpackage requires Harden dumpcap capabilities - Ver. 1.10.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 19 : wireshark-1.10.3-2.fc19 (2013-20829)

Harden dumpcap capabilities - Ver. 1.10.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora Update for wireshark FEDORA-2013-20829

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2792-1 : wireshark - several vulnerabilities

Multiple vulnerabilities were discovered in the dissectors for IEEE 802.15.4, NBAP, SIP and TCP, which could result in denial of service. The oldstable distribution squeeze is only affected by CVE-2013-6340. This problem has been fixed in version 1.2.11-6+squeeze13. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] [DSA 2792-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2792-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 04, 2013 http://www.debian.org/security/faq -...

CVE-2013-6340

epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the amount of remaining data, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-6340

Wireshark TCP dissector (epan/dissectors/packet-tcp.c) contains a flaw in computing the remaining data, enabling a crafted packet to crash the application (DoS). Affected products/versions: Wireshark 1.8.x prior to 1.8.11 and 1.10.x prior to 1.10.3. Remediation: upgrade to Wireshark 1.8.11 or 1.1...

Debian Security Advisory DSA 2792-1 (wireshark - several vulnerabilities)

Multiple vulnerabilities were discovered in the dissectors for IEEE 802.15.4, NBAP, SIP and TCP, which could result in denial of service. The oldstable distribution squeeze is only affected by CVE-2013-6340 . This problem has been fixed in version 1.2.11-6+squeeze13. OpenVAS Vulnerability Test $I...

CVE-2008-6340

Cross-site scripting XSS vulnerability in the Vox populi mvvoxpopuli extension 0.3.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6340

Cross-site scripting XSS vulnerability in the Vox populi mvvoxpopuli extension 0.3.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6340

CVE-2008-6340 affects the Vox populi (mv_vox_populi) TYPO3 extension (versions ≤ 0.3.0). The root cause is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact is limited to the vulnerability present in the ...

CVE-2007-6340

The connected advisory confirms CVE-2007-6340 affects LSrunasE 1.0 and Supercrypt 1.0 and explains the root cause: RC4 is used without a unique initialization vector, deriving a constant keystream across all passwords. This insecure design allows an attacker with local access to break encryption ...

Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340)

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: LSrunasE, Supercrypt Vendor: Geert Moernaut Type: Flawed Encryption Risk: Medium Author: Daniel Roethlisberger Date: 2008-01-29 CVE Name: CVE-2007-6340 Introduction ------------ LSrunasE 1 and Supercrypt 2 are utilities used to run commands...

CVE-2006-6340

CVE-2006-6340 concerns keystone.exe in NVIDIA nView. The vulnerability is a denial of service triggered by a long command line argument, with a note that it is not clear whether the issue crosses security boundaries. Connected documents corroborate the same description but do not provide specific...