Wireshark Multiple Dissector Multiple Vulnerabilities - May 13 (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnmay13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Wireshark Multiple Dissector Multiple Vulnerabilities - May 13 Windows Authors: Arun Kallavi Copyright: Copyright c...

CVE-2013-3558

The dissectccpbsdcompopt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3558

The dissectccpbsdcompopt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3558

CVE-2013-3558 affects Wireshark’s PPP CCP dissector in the 1.8.x line. The vulnerable component is the dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c, which fails to terminate a bit-field list, enabling remote attackers to crash the application via a malformed packet. The adviso...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2605)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2606)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:040)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The isdnpppccpresetallocstate function in drivers/isdn/isdnppp.c in the Linux 2.4 kernel before 2.4.34-rc4, as well as the 2.6 kernel, does not call the inittimer function for the ISDN PPP CCP reset state timer, which ha...

CVE-2006-5749

The isdnpppccpresetallocstate function in drivers/isdn/isdnppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does not call the inittimer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash...

CVE-2005-4293

CVE-2005-4293 describes a Cross-site Scripting (XSS) flaw in CCP’s cp-app.cgi for ClickCartPro (CCP) 5.1 and earlier. The affl parameter is injectable and can lead to remote attackers injecting arbitrary web script or HTML in the affected web page. The public documentation in the NVD shows a CVSS...

ClickCartPro (CCP) XSS vuln.

ClickCartPro CCP XSS vuln. Vuln. discovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/clickcartpro-ccp-xss-vuln.html vendor:http://www.clickcartpro.com/ affected version:5.1 and prior Product Description: CCP is a full featured shopping cart engine that will...