Wireshark Multiple Vulnerabilities Feb-09 (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnfeb09win.nasl 4970 2017-01-09 15:00:59Z teissa $ Wireshark Multiple Vulnerabilities Feb-09 Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Network...

Wireshark Multiple Vulnerabilities (Feb 2009) - Linux

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Avahi: Denial of service

Background Avahi is a system that facilitates service discovery on a local network. Description Hugo Dias reported a failed assertion in the originatesfromlocallegacyunicastsocket function in avahi-core/server.c when processing mDNS packets with a source port of 0. Impact A remote attacker could...

ZIM Server Multiple Vulnerabilities

The host is installed with ZIM Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbzimservermultvuln800201.nasl 5370 2017-02-20 15:24:26Z cfi $ ZIM Server Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbone Networks GmbH,...

Checkpoint VPN-1 PAT information disclosure

Checkpoint VPN-1 PAT information disclosure By sending crafted packets to ports on the firewall which are mapped by port address translation PAT to ports on internal devices, information about the internal network may be disclosed in the resulting ICMP error packets. Port 18264/tcp on the firewal...

DEBIAN-CVE-2008-4684

packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service application crash via a certain series of packets, as demonstrated by enabling the 1 PRP or 2 MATE post dissector...

CVE-2008-4544

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...

CVE-2008-4544

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...

Code injection

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...

CVE-2008-4544

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...

CVE-2008-3804

Unspecified vulnerability in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service memory corruption via crafted packets for which the software path is used...

CVE-2008-3804: Undefined Security Weakness

Unspecified vulnerability in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service memory corruption via crafted packets for which the software path is used...

Wireshark: Multiple Denials of Service

Background Wireshark is a network protocol analyzer with a graphical front-end. Description The following vulnerabilities were reported: Multiple buffer overflows in the NCP dissector CVE-2008-3146. Infinite loop in the NCP dissector CVE-2008-3932. Invalid read in the tvbuncompress function when...

USN-620-1: OpenSSL vulnerabilities

It was discovered that OpenSSL was vulnerable to a double-free when using TLS server extensions. A remote attacker could send a crafted packet and cause a denial of service via application crash in applications linked against OpenSSL. Ubuntu 8.04 LTS does not compile TLS server extensions by...

CVE-2008-2057

The Instant Messenger IM inspection engine in Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance 7.2.x before 7.24, 8.0.x before 8.0310, and 8.1.x before 8.112 allows remote attackers to cause a denial of service via a crafted packet...

PT-2008-3574 · Cisco · Cisco Pix Security Appliance +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA versions 7.2.x through 7.23 Cisco Adaptive Security Appliance ASA versions 8.0.x through 8.039 Cisco Adaptive Security Appliance ASA versions 8.1.x through 8.111 Cisco PIX security appliance versions 7.2....

cups: dereference of free'd memory handling IPP browse requests

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

cups: dereference of free'd memory handling IPP browse requests

Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service crash via crafted IPP packets...

DEBIAN-CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

DEBIAN-CVE-2008-0061

MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name CNAME record from resolving, aka "improper rotation of resource records."...