Ethereal 10.x - AFP Protocol Dissector Remote Format String

Ethereal 10.x - AFP Protocol Dissector Remote Format String / etherealv0.10.: AFP remote format string exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xethereal-afp-fmt.c -o xethereal-afp-fmt ethereal homepage/url: http://www.ethereal.com syntax: ./xethereal-afp-fmt -spSrPanc...

[SECURITY] [DSA 750-1] New dhcpcd packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 750-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...

Debian DSA-750-1 : dhcpcd - out-of-bound memory access

'infamous42md' discovered that dhcpcd, a DHCP client for automatically configuring IPv4 networking, can be tricked into reading past the end of the supplied DHCP buffer which could lead to the daemon crashing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

FreeBSD-SA-05:13.ipfw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:13.ipfw Security Advisory The FreeBSD Project Topic: ipfw packet matching errors with address tables Category: core Module: netinet Announced: 2005-06-29...

CVE-2002-1971

The CVE-2002-1971 entry describes a vulnerability in Sourcecraft Networking_Utils 1.0 where the ping utility (networking_utils.php) can read arbitrary files via shell metacharacters in the Domain name or IP argument. Affected component: networking_utils.php in Sourcecraft Networking_Utils 1.0. Ro...

CVE-2004-0462

The CVE-2004-0462 issue concerns the built-in web servers in multiple networking devices failing to set the Secure attribute on cookies during HTTPS sessions, risking plaintext cookie exposure over HTTP. Connected materials (notably F5 BIG-IP SOL15406) specify affected products and versions, e.g....

CVE-2005-0601

Cisco devices running Application and Content Networking System ACNS 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access...

RHEL 2.1 / 3 : kdenetwork (RHSA-2005:175)

Updated kdenetwork packages that fix a file descriptor leak are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The kdenetwork packages contain a collection of networking applications for the K Desktop Environment. A bug was found in t...

CVE-2005-0599

Cisco devices running Application and Content Networking System ACNS 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service CPU consumption via malformed IP packets...

CVE-2005-0600

Cisco devices running Application and Content Networking System ACNS 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service bandwidth consumption via "crafted IP packets" that are continuously forwarded...

Multipl Cisco ACNS (Application and Content Networking System) vulnerabilities

Default administration account, DoS...

HP-UX Security patch : PHNE_9032

The remote host is missing HP-UX Security Patch number PHNE9032 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17061;...

HP-UX Security patch : PHNE_12608

The remote host is missing HP-UX Security Patch number PHNE12608 . Security Bulletin for telnet services in HP-UX rel. 10.30 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16905;...

HP-UX Security patch : PHNE_9037

The remote host is missing HP-UX Security Patch number PHNE9037 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17056;...

HP-UX Security patch : PHNE_28536

The remote host is missing HP-UX Security Patch number PHNE28536 . SSRT3451 Potential Security Vulnerability in HP-UX network drivers Data Leakage rev. 01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

HP-UX Security patch : PHNE_13180

The remote host is missing HP-UX Security Patch number PHNE13180 . Security Vulnerability in ppl command %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16559; scriptversion"1.8";...

HP-UX Security patch : PHNE_9376

The remote host is missing HP-UX Security Patch number PHNE9376 . Security Vulnerability in the ppl executable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16999;...

HP-UX Security patch : PHNE_9034

The remote host is missing HP-UX Security Patch number PHNE9034 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17059;...

CVE-2004-0139

Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "tunbind changes tbind's behavior," has unknown impact and attack vectors...

CVE-2004-0462

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server...