CVE-2009-3551

CVE-2009-3551 is an off-by-one vulnerability in Wireshark 1.2.0–1.2.2 that affects the SMB dissector (dissect_negprot_response in packet-smb.c). This flaw could cause an application crash (denial of service) when processing a crafted packet trace file. Public advisories indicate the issue is fixe...

PT-2009-5840 · Wireshark · Wireshark

Name of the Vulnerable Software and Affected Versions: Wireshark versions 1.2.0 through 1.2.2 Description: The issue is caused by an off-by-one error in the dissect negprot response function in packet-smb.c in the SMB dissector. This allows remote attackers to cause a denial of service, resulting...

Debian: Security Advisory (DSA-1907-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1902-1 (elinks)

The remote host is missing an update to elinks announced via advisory DSA 1902-1. OpenVAS Vulnerability Test $Id: deb19021.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1902-1 elinks Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

elinks: entity_cache static array buffer overflow (off-by-one)

Buffer overflow in entitycache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service crash via a crafted link...

SuSE9 Security Update : qt3 (YOU Patch Number 11795)

An off-by-one error in the QUtf8Decoder::toUnicode method has been found which may allow a denial of service attack with specially crafted UTF-8 character sequences that trigger a buffer overflow. CVE-2007-4137 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plug...

Gentoo Security Advisory GLSA 200909-13 (irssi)

The remote host is missing updates announced in advisory GLSA 200909-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-13 (irssi)

The remote host is missing updates announced in advisory GLSA 200909-13. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200909-13 : irssi: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200909-13 irssi: Execution of arbitrary code Nemo discovered an off-by-one error leading to a heap overflow in irssi's eventwallops parsing function. Impact : A remote attacker might entice a user to connect to a malicious IRC...

irssi: Execution of arbitrary code

Background irssi is a modular textUI IRC client with IPv6 support. Description Nemo discovered an off-by-one error leading to a heap overflow in irssi's eventwallops parsing function. Impact A remote attacker might entice a user to connect to a malicious IRC server, use a man-in-the-middle attack...

Gentoo Security Advisory GLSA 200908-07 (Compress-Raw-Zlib Compress-Raw-Bzip2)

The remote host is missing updates announced in advisory GLSA 200908-07. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Mandrake Security Advisory MDVSA-2009:207 (perl-Compress-Raw-Bzip2)

The remote host is missing an update to perl-Compress-Raw-Bzip2 announced via advisory MDVSA-2009:207. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

GLSA-200908-07 : Perl Compress::Raw modules: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200908-07 Perl Compress::Raw modules: Denial of Service Leo Bergolth reported an off-by-one error in the inflate function in Zlib.xs of Compress::Raw::Zlib, possibly leading to a heap-based buffer overflow CVE-2009-1391. Paul...

PT-2009-4348 · Perl · Compress-Raw-Bzip2

Name of the Vulnerable Software and Affected Versions: Compress-Raw-Bzip2 module versions prior to 2.018 Description: The issue is related to an off-by-one error in the bzinflate function in Bzip2.xs, which can be exploited by context-dependent attackers to cause a denial of service, resulting in...

Fedora Core 10 FEDORA-2009-7680 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-7680. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Novell eDirectory Multiple Vulnerabilities (Jul 2009) - Windows

Novell eDirectory is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:novell:edirectory";...

python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...

Stack overflow

Off-by-one error in the optionswrite function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which trigge...

openSUSE Security Update : irssi (irssi-1004)

Fixed a irssi off by one overflow in the eventwallops function. CVE-2009-1959 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update irssi-1004. The text description ...

openSUSE Security Update : irssi (irssi-1004)

Fixed a irssi off by one overflow in the eventwallops function. CVE-2009-1959 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update irssi-1004. The text description ...