163 matches found
Tcpdump Cisco HDLC Parser Buffer Overflow Vulnerability
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.Cisco HDLC parser is one of the advanced data link control protocol...
UBUNTU-CVE-2017-13687
The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlcprint...
DEBIAN-CVE-2017-11409
In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type...
kernel: Race condition access to n_hdlc.tbuf causes double free in n_hdlc_release()
A race condition flaw was found in the NHLDC Linux kernel driver when accessing nhdlc.tbuf list that can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device could use this flaw to increase their privileges on the system...
kernel: Race condition access to n_hdlc.tbuf causes double free in n_hdlc_release()
A race condition flaw was found in the NHLDC Linux kernel driver when accessing nhdlc.tbuf list that can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device could use this flaw to increase their privileges on the system...
Security Using Pre-Existing Routing for Mobile Ad hoc Networks: SUPERMAN
Security Using Pre-Existing Routing for Mobile Ad hoc Networks The flexibility and mobility of Mobile Ad hoc Networks MANETs have made them increasing popular in a wide range of use cases. To protect these networks, security protocols have been developed to protect routing and application data...
DEBIAN-CVE-2015-2931
Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI...
UBUNTU-CVE-2015-2931
Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI...
Wireshark ATN-CPDLC Parser Denial of Service Vulnerability
Wireshark is a network packet analyzer. The dissectatncpdlcheur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c within the ATN-CPDLC parser in Wireshark version 1.12.x prior to 1.12.4, fails to properly adhere to TRY/ENDTRY code requirements. A remote attacker can exploit this vulnerabilit...
Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow
No description provided by source. $Id: wiresharkpacketdect.rb 12364 2011-04-19 07:53:58Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
Siemens S7 1214C PN-DCP Request Message Buffer Overflow Vulnerability
The SIMATIC S7-1200 is a small controller module used in low-end discrete automation systems and stand-alone automation. hardware CPU 1214C under the Siemens S7-1200 family supports the Data Link Layer Device Management Protocol PN-DCP PROFINET Discovery and Configuration Protocol for local area...
CVE-2011-1625
Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...
kernel: isdn: hfc_usb: fix read buffer overflow
The collectrxframe function in drivers/isdn/hisax/hfcusb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read...
CVE-2009-2138
Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via 1 the returnto parameter to login.php or 2 the returnto parameter in a delete action to news.php. NOTE: this can be leveraged for cross-sit...
about: blank windows
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting XSS attacks with chrome privileges via an addon that inserts a 1 javascript: or 2 data: link into an about:blank document loaded by chrome via a the...
about: blank windows
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting XSS attacks with chrome privileges via an addon that inserts a 1 javascript: or 2 data: link into an about:blank document loaded by chrome via a the...
about: blank windows
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting XSS attacks with chrome privileges via an addon that inserts a 1 javascript: or 2 data: link into an about:blank document loaded by chrome via a the...
Cisco IOS Data-link Switching (DLSw) Capabilities Exchange Remote DoS (CSCsf28840)
The remote host is a CISCO router containing a version of IOS that is affected by a denial of service vulnerability. An attacker may exploit this flaw to crash the remote device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24019; scriptversion"1.19";...
Cisco Security Advisory: DLSw Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: DLSw Vulnerability Advisory ID: cisco-sa-20070110-dlsw http://www.cisco.com/warp/public/707/cisco-sa-20070110-dlsw.shtml Revision 1.0 For Public Release 2007 January 10 1600 UTC GMT -...