822 matches found
Wireshark Multiple Vulnerabilities(01) - Feb2013 (Windows)
This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvuln01feb13win.nasl 6079 2017-05-08 09:03:33Z teissa $ Wireshark Multiple Vulnerabilities01 - Feb2013 Windows Authors: Antu Sanadi Copyright: Copyright c 2013 Greenbone...
CVE-2013-1580
The dissectcmstatustlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service infinite loop via a malform...
DEBIAN-CVE-2013-1580
The dissectcmstatustlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service infinite loop via a malform...
CVE-2013-1580
The dissectcmstatustlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service infinite loop via a malform...
UBUNTU-CVE-2013-1580
The dissectcmstatustlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service infinite loop via a malform...
CVE-2013-1580
The dissectcmstatustlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service infinite loop via a malform...
CVE-2013-1580
CVE-2013-1580 affects Wireshark's DOCSIS CM-STATUS dissector. The dissect_cmstatus_tlv function uses an incorrect data type for a position variable, allowing a remote attacker to cause a denial of service via a malformed packet (infinite loop). Affected versions are Wireshark 1.6.x before 1.6.13 ...
Information disclosure
IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter...
CVE-2012-1733
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to CM...
kernel: panic in ib_cm:cm_work_handler
Race condition in the cmworkhandler function in the InfiniBand driver drivers/infiniband/core/cma.c in Linux kernel 2.6.x allows remote attackers to cause a denial of service panic by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer...
kernel: panic in ib_cm:cm_work_handler
Race condition in the cmworkhandler function in the InfiniBand driver drivers/infiniband/core/cma.c in Linux kernel 2.6.x allows remote attackers to cause a denial of service panic by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer...
Oracle Linux 6 Unbreakable Enterprise kernel security fix update
2.6.32-100.28.11.el6 - fs/partitions: Validate mapcount in Mac partition tables CVE-2011-1010 - nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab v3 CVE-2011-1090 2.6.32-100.28.10.el6 - Use cciss for some Smart Array controller for OL5 orabug 11899706 - CVEs from...
kernel: panic in ib_cm:cm_work_handler
Race condition in the cmworkhandler function in the InfiniBand driver drivers/infiniband/core/cma.c in Linux kernel 2.6.x allows remote attackers to cause a denial of service panic by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer...
CVE-2010-2896
CVE-2010-2896 affects IBM FileNet Content Manager (CM) versions 4.0.0, 4.0.1, 4.5.0, and 4.5.1 prior to FP4. The root cause is improper handling of the InheritParentPermissions setting during an upgrade from 3.x, which may allow an attacker to bypass intended folder permissions via unspecified ve...
CVE-2010-2896
IBM FileNet Content Manager CM 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors...
CVE-2010-1041
The CVE-2010-1041 entry concerns IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13. The vulnerability is in the single sign-on Web Services implementation; the root cause is not specified in the available documents. Impact is d...
http-methods NSE Script
Finds out what options are supported by an HTTP server by sending an OPTIONS request. Lists potentially risky methods. It tests those methods not mentioned in the OPTIONS headers individually and sees if they are implemented. Any output other than 501/405 suggests that the method is if not in the...
CVE-2003-1576
CVE-2003-1576 describes a buffer overflow in pamverifier within Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8/9 SPARC. The vulnerability allows remote code execution via unspecified vectors. Affected components include pamverifier in CM 1.0 on Solaris SPARC. The issue...
Serena Dimensions CM Desktop Client does not validate the server SSL certificate
Application: Serena Dimensions CM Affected versions: 10.1 and later Vulnerability: man-in-the-middle attacks Problem type: remote Problem description: ==================== The client/server connection can be SSL encrypted by setting "-ssl" in the listener.dat. The problem is that the Desktop clie...