9914 matches found
Moderate: Red Hat Security Advisory: : Updated Ethereal packages fix security issues
Updated Ethereal packages that fix a number of exploitable security issues are now available. Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues, it may be possible to make Ethereal crash or run arbitrary code by injecting...
[Full-Disclosure] OSX 10.3 Personal Firewall.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Panther OSX 10.3 Firewall Configuration App OSX Personal Firewall gives false sense of security due to lack of ICMP and UDP protocol filtering. maki: br00t$ swvers ProductName: Mac OS X ProductVersion: 10.3 BuildVersion: 7B85 Quoting Apple:...
Sustworks Unauthorized Network Monitoring and tcpflow format string attack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Sustworks Unauthorized Network Monitoring and tcpflow format string attack Release Date: 08/07/2003 Application: IPNetMonitorX and IPNetSentryX Platform: Mac OS X Severity: Local users can...
X servers may have insecure default configuration of xhosts
Overview Some X server products client software for connecting to a host with Xwindows capabilities may be configured insecurely by default. Description In X windows terminology, the X server is the software which provides "services" to the client, while the X client is the software that makes...
Moderate: Red Hat Security Advisory: : : : Updated tcpdump packages fix various vulnerabilities
Updated tcpdump, libpcap, and arpwatch packages for iSeries and pSeries fix various vulnerabilities. Tcpdump is a command-line tool for monitoring network traffic. The Red Hat tcpdump packages advertise that by default tcpdump will drop permissions to user 'pcap'. Due to a compilation error this...
Portmon file arbitrary read/write access vulnerability
Package: Portmon Auth: http://www.aboleo.net/ Versions: 1.7 prior ? Vulnerability: File arbitrary read/write access vulnerability Portmon is a network service monitoring daemon http://www.aboleo.net/software/portmon/. "In order to use ping support, Portmon must run as root or be installed setuid...
Moderate: Red Hat Security Advisory: tcpdump security update
Updated tcpdump packages that fix an infinite loop vulnerability and drop privileges on startup are now available. Tcpdump is a command-line tool for monitoring network traffic. A vulnerability exists in tcpdump before 3.7.2 and is related to an inability to handle unknown RADIUS attributes...
Activity Monitor 2002 remote Denial of Service
Overview: "Activity Monitor 2002 is a monitoring software system for real time employee monitoring and continuous tracking of users activities on networked computers." More information can be found at www.softactivity.com Vulnerability Description: By connecting TCP port 15163 and sending a long...
Some problems in Privatefirewall 3.0
UkR security team presents: Some problems in Privatefirewall 3.0 /////////////////////////////////////////////////////////////////////////////////////////// Product: Privatefirewall version: 3.0 Vendor : Privacyware http://www.privacyware.com Author : UkR-XblP [email protected] - the chief specialist...
tcpdump enters infinite loop when parsing crafted ISAKMP packets
Overview There is a denial-of-service vulnerability in tcpdump that may allow a remote attacker to cause tcpdump to enter an infinite loop. Description tcpdump, a tool used to monitor network traffic, has the ability to capture Internet Security Association and Key Management Protocol ISAKMP...
Moderate: Red Hat Security Advisory: : Updated ethereal packages fix security vulnerabilities
Updated ethereal packages are now available which fix a format string bug and a heap-based buffer overflow. Ethereal is a package designed for monitoring network traffic on your system. Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service crash and possibly execute...
Moderate: Red Hat Security Advisory: : Updated tcpdump packages fix various vulnerabilities
Updated tcpdump, libpcap, and arpwatch packages are available, fixing a number of vulnerabilities that could be used to cause a denial of service attack, or possibly execute arbitrary code. tcpdump is a command-line tool for monitoring network traffic. The BGP decoding routines in tcpdump before...
CVE-2002-1443
The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeydown" event handler...
apcnisd / apcupsd Detection
The remote service is a daemon to monitor and manage an APC UPS battery backup unit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid11483; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...
[SECURITY] [DSA 255-1] New tcpdump packages fix denial of service vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 255-1 [email protected] http://www.debian.org/security/ Martin Schulze February 27th, 2003 http://www.debian.org/security/faq -...
DSA-255 tcpdump - infinite loop
Bulletin has no description...
Netscape / iPlanet .perf Remote Information Disclosure
Requesting the URI /.perf gives information about the currently running Netscape/iPlanet web server. This script was written by Sullo [email protected] Changes by Tenable: - Changed family, output formatting 9/2/09 - Revised plugin title 9/18/09 - Replaced URL 6/4/13 include"compat.inc"; ifdescripti...
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages are available which fix various security issues. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Ethereal is a package designed for monitoring network traffic on your system. Several security issues have been found in the Ethereal packages distribut...
Moderate: Red Hat Security Advisory: : Updated Ethereal packages are available
Updated Ethereal packages are available which fix various security issues. Ethereal is a package designed for monitoring network traffic on your system. Several security issues have been found in the Ethereal packages distributed with Red Hat Linux versions 7.2, 7.3, and 8.0 Multiple integer...