CVE-2015-0261

tcpdump before 4.7.2 is affected by an integer signness error in mobility_opt_print within the IPv6 mobility printer, allowing remote attackers to cause denial of service via an out-of-bounds read and crash, or possibly execute arbitrary code via a negative length value. Affected product is tcpdu...

CVE-2015-0261

Integer signedness error in the mobilityoptprint function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read and crash or possibly execute arbitrary code via a negative length value...

UBUNTU-CVE-2015-0261

Integer signedness error in the mobilityoptprint function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read and crash or possibly execute arbitrary code via a negative length value...

tcpdump denial of service vulnerability (CNVD-2015-01966)

tcpdump is a sniffer tool that runs at the command line. It allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A type conversion and signature error exists in mobilityoptprint in tcpdump, which can be exploited by an attacke...

tcpdump: multiple issues

CVE-2014-8767 denial of service Integer underflow in the olsrprint function when in verbose mode, allows remote attackers to cause a denial of service crash via a crafted length value in an OLSR frame. - CVE-2014-8768 denial of service Multiple Integer underflows in the geonetprint function, when...

Mac OS X : Cisco AnyConnect Secure Mobility Client < 3.1.10010.0 / 4.0.x < 4.0.4014.0 / 4.1.x < 4.1.4011.0 Code Execution Vulnerability

The Cisco AnyConnect Secure Mobility Client installed on the remote Mac OS X host is a version prior to 3.1.10010.0, or is version 4.0.x prior to 4.0.4014.0, or version 4.1.x prior to 4.1.4011.0. It is, therefore, affected by a flaw that allows unauthenticated IPC commands to install software as...

CVE-2015-0664

Cisco AnyConnect Secure Mobility Client (affected: 4.0(.00051) and earlier) contains an IPC channel vulnerability (CVE-2015-0664) that allows a local attacker to write to arbitrary user-space memory and escalate privileges via specially crafted IPC messages. Multiple Nessus/Cisco advisories reite...

CVE-2015-0664: Improper Input Validation

The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195...

Cisco AnyConnect Secure Mobility Client Arbitrary File Write Vulnerability

The Cisco AnyConnect Secure Mobility Client is Cisco's next-generation VPN client. The Cisco AnyConnect Secure Mobility Client has a security vulnerability in inter-process communication IPC that allows a local attacker to write and overwrite arbitrary files with elevated privileges...

CVE-2015-0663

The CVE-2015-0663 entry covers Cisco AnyConnect Secure Mobility Client IPC access control weakness. Affected software: Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier. Vulnerability: improper access control for IPC messages that allows a local, authenticated/at least local user to...

CVE-2015-0662

Cisco AnyConnect Secure Mobility Client is affected by CVE-2015-0662 due to unauthenticated IPC commands that allow installation of a root-owned software package, enabling local privilege escalation. Affected versions include 4.0(.00051) and earlier (and related 4.0/4.1 lines noted in Nessus chec...

CVE-2015-0665

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173...

CVE-2015-0665

CVE-2015-0665 affects Cisco AnyConnect Secure Mobility Client via the Hostscan IPC path traversal. A local authenticated attacker can exploit crafted IPC commands to write or overwrite arbitrary files. Affected: 4.0(.00051) and earlier Hostscan IPC handling (path traversal vulnerability). Impact:...

DLA-174-1 tcpdump - security update

Bulletin has no description...

CVE-2015-0665: Improper Limitation of a Pathname to a Restricted Directory

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173...

CVE-2015-0662: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385...

CVE-2015-0663: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392...

Multiple Stack Buffer Overflow Vulnerabilities in Motorola Mobility Scanner SDK

The Motorola Mobility Scanner SDK is a suite of applications from Motorola Mobility USA that provide support for capturing images. The Motorola Mobility Scanner SDK suffers from multiple stack buffer overflow vulnerabilities that allow an attacker to submit a special string to the open method in...

Motorola Mobility Scanner SDK Local Elevation of Privilege Vulnerability

The Motorola Mobility Scanner SDK is a suite of applications from Motorola Mobility USA that provide support for capturing images. A local elevation of privilege vulnerability exists in the Motorola Mobility Scanner SDK, which can be exploited by a local attacker to elevate privileges and execute...

Code injection

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117...