GLSA-200708-12 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-12 Wireshark: Multiple vulnerabilities Wireshark doesn't properly handle chunked encoding in HTTP responses CVE-2007-3389, iSeries capture files CVE-2007-3390, certain types of DCP ETSI packets CVE-2007-3391, and SSL or MMS...

[SECURITY] Fedora 7 Update: kdegraphics-3.5.7-2.fc7

Graphics applications for the K Desktop Environment, including kamera digital camera support kcoloredit palette editor and color chooser kdvi displays TeX .dvi files kghostview displays postscript files kiconedit icon editor kooka scanner application kpdf displays PDF files kruler screen ruler an...

CVE-2007-4160

The default configuration of TIBCO Rendezvous RV 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination for a network message, which might make it easier for remote attackers to capture message contents by sniffing the network...

The RIP dynamic routing Protocol attack-vulnerability warning-the black bar safety net

Graphic version of the download address http://www.i170.com/attach/1ACE62D7-1AD6-4F40-AAEC-CB94B07C833A Author:qimingliu Blog:http://john. i170. cn Email:[email protected] A network structure figure ! II configure the RIP routing Protocol On Router A ON do the following RIP routing configuration...

aix53-capture.txt

/ 07/2007: public release qaaz@aix:$ ./aix-capture -------------------------------- AIX capture Local Root Exploit By qaaz -------------------------------- bash: no job control in this shell bash-3.00 / include include include include include include include define TARGET "/usr/bin/capture" defin...

iDefense Security Advisory 07.26.07: IBM AIX capture Terminal Control Sequence Buffer Overflow Vulnerability

IBM AIX capture Terminal Control Sequence Buffer Overflow Vulnerability iDefense Security Advisory 07.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 26, 2007 I. BACKGROUND The capture program is a setuid root application, installed by default under multiple versions of IBM AIX,...

IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation

/ 07/2007: public release IBM AIX include include include include include include define TARGET "/usr/bin/capture" define VALCNT 40 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char qaazcode = "\x60\x60\x60\x60\x60\x60\x60\x60" "\x7c\x63\x1a\x79\x40\x82\xff\xfd"...

IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation

IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation / 07/2007: public release IBM AIX include include include include include include define TARGET "/usr/bin/capture" define VALCNT 40 define MAXx,y x y ? x : y define ALIGNx,y x + y - 1 / y y unsigned char qaazcode =...

IBM AIX utilities multiple security vulnerabilities

Multiple suid root ftp client buffer overflow, dynamic library loading via -R command line argument in pioout, buffer overflow with terminal control sequences in capture...

Fedora Core 6 : wireshark-0.99.6-1.fc6 (2007-628)

Upgrade to 0.99.6 due to multiple security issues. - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshark could loop excessively whil...

[SECURITY] Fedora 7 Update: wireshark-0.99.6-1.fc7

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

[SECURITY] Fedora Core 6 Update: wireshark-0.99.6-1.fc6

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Wireshark多个协议处理模块远程拒绝服务漏洞

BUGTRAQ ID: 24662 CVECAN ID: CVE-2007-3389,CVE-2007-3390,CVE-2007-3391,CVE-2007-3392,CVE-2007-3393 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的多个协议解析模块实现上存在漏洞，远程攻击者可能利用此漏洞导致控制用户机器。 如果处理了HTTP响应中的分块编码、特制iSeries抓包文件、畸形DCP...

Code injection

Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service crash via crafted iSeries capture files that trigger a SIGTRAP...

CVE-2007-3390

Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service crash via crafted iSeries capture files that trigger a SIGTRAP...

CVE-2007-3390

Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service crash via crafted iSeries capture files that trigger a SIGTRAP...

CVE-2007-3390

Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service crash via crafted iSeries capture files that trigger a SIGTRAP...

[SECURITY] Fedora 7 Update: zvbi-0.2.25-1.fc7

ZVBI provides functions to capture and decode VBI data. The vertical blanki ng interval VBI is an interval in a television signal that temporarily suspe nds transmission of the signal for the electron gun to move back up to the first line of the television screen to trace the next screen field. T...

CVE-2007-2115

Unspecified vulnerability in the Change Data Capture CDC component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in t...

Buffer overflow

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors, related to 1 Change Data Capture CDC, aka DB08, and 2 Oracle Instant Client, aka DB11. NOTE: as of 20070424, oracle has not disputed reliable claims that thes...