UBUNTU-CVE-2013-3561

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service loop or application crash via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector...

CVE-2013-3561

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service loop or application crash via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector...

CVE-2013-3561

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service loop or application crash via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector...

CVE-2013-3561

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service loop or application crash via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector...

CVE-2013-3561: Undefined Security Weakness

Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service loop or application crash via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector...

PT-2013-4481

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to multiple integer overflows that can cause a denial of service, resulting in an application crash or loop, when a malformed packet is processed. This is associated with...

leaftec cms multiple vulnerabilities

Exploit for php platform in category web applications ==================================== leaftec cms multiple vulnerabilities ==================================== Exploit Title: leaftec cms multiple vulnerabilities Date: 21.03.2010 Author: Valentin Version: Tested on: Debian etch CVE : Code : :...

DSA-2005-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

Debian DSA-1977-1 : python2.4 python2.5 - several vulnerabilities

Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that the embedded Expat copy in the interpreter for the Python language, does not properly process malformed or crafted XML files. CVE-2009-3560 CVE-2009-3720 This vulnerability could allow an attacker to cause a denial of service while...

Debian DSA-1946-1 : belpic - cryptographic weakness

It was discovered that belpic, the belgian eID PKCS11 library, does not properly check the result of an OpenSSL function for verifying cryptographic signatures, which could be used to bypass the certificate validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-1924-1 : mahara - several vulnerabilities

Two vulnerabilities have been discovered in mahara, an electronic portfolio, weblog, and resume builder. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3298 Ruslan Kabalin discovered a issue with resetting passwords, which could lead to a privilege...

Debian DSA-1936-1 : libgd2 - several vulnerabilities

Several vulnerabilities have been discovered in libgd2, a library for programmatic graphics creation and manipulation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-0455 Kees Cook discovered a buffer overflow in libgd2's font renderer. An attacker...

Debian DSA-1853-1 : memcached - heap-based buffer overflow

Ronald Volgers discovered that memcached, a high-performance memory object caching system, is vulnerable to several heap-based buffer overflows due to integer conversions when parsing certain length attributes. An attacker can use this to execute arbitrary code on the system running memcached on...

Debian DSA-1930-1 : drupal6 - several vulnerabilities

Several vulnerabilities have been found in drupal6, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2372 Gerhard Killesreiter discovered a flaw in the way user signatures are handled. It is possible for...

Debian DSA-1828-1 : ocsinventory-agent - insecure module search path

It was discovered that the ocsinventory-agent which is part of the ocsinventory suite, a hardware and software configuration indexing service, is prone to an insecure perl module search path. As the agent is started via cron and the current directory / in this case is included in the default perl...

Debian DSA-1925-1 : proftpd-dfsg - insufficient input validation

It has been discovered that proftpd-dfsg, a virtual-hosting FTP daemon, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, when the dNSNameRequired TLS option is enabled. %NASLMINLEVEL 70300 C Tenable Network Security,...

Debian DSA-1907-1 : kvm - several vulnerabilities

Several vulnerabilities have been discovered in kvm, a full virtualization system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5714 Chris Webb discovered an off-by-one bug limiting KVM's VNC passwords to 7 characters. This flaw might make it...

Debian DSA-1976-1 : dokuwiki - several vulnerabilities

Several vulnerabilities have been discovered in dokuwiki, a standards compliant simple to use wiki. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0287 It was discovered that an internal variable is not properly sanitized before being used to list...

Debian DSA-1937-1 : gforge - insufficient input sanitising

It was discovered that gforge, collaborative development tool, is prone to a cross-site scripting attack via the helpname parameter. Beside fixing this issue, the update also introduces some additional input sanitising. However, there are no known attack vectors. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-1988-1 : qt4-x11 - several vulnerabilities

Several vulnerabilities have been discovered in qt4-x11, a cross-platform C++ application framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0945 Array index error in the insertItemBefore method in WebKit, as used in qt4-x11, allows remote...