1357 matches found
Ethereal contains integer overflow in PPP dissector
Overview Ethereal is a network traffic analysis package. The PPP packet dissector contains a vulnerability that may result in the execution of arbitrary code. Description The PPP packet dissector for Ethereal contains an integer overflow vulnerability. According to the Ethereal Advisory,...
CVE-2002-0851
The CVE-2002-0851 issue affects the ISDN4Linux (i4l) package, specifically the PPP daemon ipppd. A format string vulnerability in the device name command line argument is not properly sanitized in a syslog call, allowing a local user to exploit the flaw and gain root privileges. The connected doc...
CVE-2002-1356: Undefined Security Weakness
Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors, possibly related to a missing field for EndVerifyAck messages...
CVE-2002-0854
Buffer overflows in ISDN Point to Point Protocol PPP daemon ipppd in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges...
CVE-2002-0854
The CVE-2002-0854 entry documents a buffer overflow in the ISDN Point to Point Protocol daemon (ipppd) of the i4l package, affecting SuSE 7.3 and 8.0 (and possibly other OSes). The underlying issue is a buffer overflow in ipppd, which could allow local users to gain privileges. The connected reco...
CVE-2002-0827: Undefined Security Weakness
Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via 1 ppptalk or 2 ppp, a different vulnerability than CVE-2002-0824...
Buffer overflow in OpenUnix/Unixware ppp utils
No description provided...
CVE-1999-1341
CVE-1999-1341 concerns the Linux kernel before 2.3.18 or 2.2.13pre15, when compiled with SLIP and PPP options, allowing a local unprivileged user to forge IP packets via the TIOCSETD option on tty devices. The vulnerability enables local access to tamper with packet data, with partial impacts to ...
CVE-1999-1203
CVE-1999-1203 affects Ascend systems using Multilink PPP for ISDN dialup prior to version 4.6. The vulnerability arises from a spoofed endpoint identifier, enabling remote attackers to cause a denial of service (availability impact). The provided documents do not specify a fix or mitigation. No e...
CVE-1999-1203
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier...
CVE-1999-1385
The CVE-1999-1385 entry describes a buffer overflow in the FreeBSD ppp program (FreeBSD 2.1 and earlier) that allows local users to gain privileges via a long HOME environment variable. The connected documents corroborate the description, identifying the affected component as the ppp program on o...
CVE-1999-1385
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable...
CVE-1999-1385: Undefined Security Weakness
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable...
CVE-1999-1203: Undefined Security Weakness
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier...
CVE-2001-0858
Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges...
CVE-2001-0858
Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges...
Security Update: [CSSA-2001-SCO.32] Open UNIX, UnixWare 7: buffer overflow in ppp utilities
Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: buffer overflow in ppp utilities Advisory number: CSSA-2001-SCO.32 Issue date: 2001 November 12 Cross reference: 1. Problem Description There is a buffer overflow in several of the ppp utilities that are linked to...
CVE-2000-1167
Affected software: FreeBSD ppp utility (4.1.1 and earlier). Vulnerability : inadequate access restriction under the nat deny_incoming directive allows remote attackers to connect to the target system. Impact : per the CVSS data, network access with partial confidentiality, integrity, and availabi...
CVE-2000-1167: Undefined Security Weakness
ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat denyincoming" command, which allows remote attackers to connect to the target system...