Debian: Security Advisory (DSA-725-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1106)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 725-1 (ppxp)

The remote host is missing an update to ppxp announced via advisory DSA 725-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian Security Advisory DSA 1106-1 (ppp)

The remote host is missing an update to ppp announced via advisory DSA 1106-1. Marcus Meissner discovered that the winbind plugin in pppd does not check whether a setuid call has been successful when trying to drop privileges, which may fail with some PAM configurations. The old stable distributi...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2606)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...

Wireshark 0.99.6版本多个远程拒绝服务漏洞

BUGTRAQ ID: 26532 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的以下协议处理模块中存在多个死循环、内存耗尽、崩溃或缓冲器溢出漏洞： SSL、ANSI MAP、Firebird/Interbase、NCP、HTTP、MEGACO、DCP ETSI、PPP和蓝牙SDP处理模块 处理畸形的MP3或iSeries（OS/400）通讯追踪文件 处理畸形的DNP或RPC端口映射报文 如果Wireshark受骗从网络抓包或通过抓包文件解析了上述畸形报文的话，就会耗尽大量系统资源。 Wireshark Wireshark 0.8.1...

CVE-2007-6112

Buffer overflow in the PPP dissector Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

DEBIAN-CVE-2007-6112

Buffer overflow in the PPP dissector Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

Buffer overflow

Buffer overflow in the PPP dissector Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

CVE-2007-6112

Buffer overflow in the PPP dissector Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

CVE-2007-6112

Buffer overflow in the PPP dissector Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

CVE-2007-6112

Buffer overflow in the PPP dissector Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

Ubuntu 6.10 : linux-source-2.6.17 vulnerabilities (USN-486-1)

The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203 The Omnikey CardMan 4040 driver cm4040cs did not limit the size of buffers passed to read and write. A local attacker could exploit this to execute...

Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerability (USN-489-1)

A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...

Ubuntu 5.10 / 6.06 LTS / 6.10 : linux-source-2.6.12/2.6.15/2.6.17 vulnerabilities (USN-416-1)

Mark Dowd discovered that the netfilter iptables module did not correcly handle fragmented IPv6 packets. By sending specially crafted packets, a remote attacker could exploit this to bypass firewall rules. This has has already been fixed for Ubuntu 6.10 in USN-395-1; this is the corresponding fix...

openSUSE 10 Security Update : kernel (kernel-4487)

This kernel update fixes the following security problems : - CVE-2007-3105: Stack-based buffer overflow in the random number generator RNG implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wake-up...

openSUSE 10 Security Update : kernel (kernel-2705)

This kernel update fixes the following security problems : - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges 222656 - CVE-2006-6106: Multiple buffer...

[SECURITY] Fedora 7 Update: fetchmail-6.3.7-2.fc7

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

USN-489-1: Linux kernel vulnerabilities

A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...

USN-486-1: Linux kernel vulnerabilities

The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203 The Omnikey CardMan 4040 driver cm4040cs did not limit the size of buffers passed to read and write. A local attacker could exploit this to execute...