598 matches found
CVE-2006-6385: Undefined Security Weakness
Stack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe network adapter drivers aka NDIS miniport drivers before 20061205 allows local users to execute arbitrary code with "kernel-level" privileges via an incorrect function call in certain OID handlers...
security flaw
Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...
CVE-2006-4267: Undefined Security Weakness
Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 oid parameter in modules/gateway/Protx/confirmed.php and the 2 xinvoicenum parameter in modules/gateway/Authorize/confirmed.php...
security flaw
Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...
Fedora Core 5 : ethereal-0.99.0-fc5.1 (2006-456)
Many security vulnerabilities have been fixed since the previous release. - The H.248 dissector could crash. Versions affected: 0.10.14. CVE: CVE-2006-1937 - The UMA dissector could go into an infinite loop. Versions affected: 0.10.12 - 0.10.14. CVE: CVE-2006-1933 - The X.509if dissector could...
Design/Logic Flaw
Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...
CVE-2006-1932
Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...
CVE-2006-1932
CVE-2006-1932 (and related CVEs 1933–1940) affect Ethereal up to version 0.10.14, via multiple dissectors and the OID printing routine, causing off-by-one errors, infinite loops, buffer overruns, crashes or aborts. Public advisories (Debian DSA-1049-1, RHSA-2006:0420, Gentoo GLSA 200604-17, OpenV...
CVE-2006-1932
Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...
Ethereal 0.99.0 Release Notes
Ethereal 0.99.0 Release Notes Table of Contents What is Ethereal? What's New Bug Fixes New and Updated Features New Protocol Support Updated Protocol Support New and Updated Capture File Support Getting Ethereal Microsoft Windows Sun Solaris Source Code Vendor-supplied Packages File Locations Kno...
CVE-2006-1932: Undefined Security Weakness
Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...
SNMP Query Installed Software Disclosure
It is possible to obtain the list of installed software on the remote host by sending SNMP requests with the OID 1.3.6.1.2.1.25.6.3.1.2 An attacker may use this information to gain more knowledge about the target host. TRUSTED...
CVE-2004-0576
The radius daemon radiusd for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service server crash via malformed SNMP messages containing an invalid OID...
CVE-2004-0576
The radius daemon radiusd for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service server crash via malformed SNMP messages containing an invalid OID...
CVE-2004-0576: Undefined Security Weakness
The radius daemon radiusd for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service server crash via malformed SNMP messages containing an invalid OID...
CVE-2004-0312: Undefined Security Weakness
Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2...
CVE-2001-0888
Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...
CVE-2001-0888: Undefined Security Weakness
Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...