PT-2014-1752

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.9 Wireshark versions 1.12.x through 1.12.0 Description The issue exists in the dissect spdu function in the SES dissector due to the lack of initialization of a certain ID value. This allows remote...

Wireshark 1.12.x < 1.12.1 Multiple DoS Vulnerabilities

The installed version of Wireshark is version 1.12.x prior to 1.12.1. It is, therefore, affected by the following vulnerabilities : - Errors exist in the following dissectors that can cause the application to crash : - CUPS CVE-2014-6425 - HIP CVE-2014-6426 - MEGACO CVE-2014-6423 - Netflow...

Wireshark 1.10.x < 1.10.10 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.10.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.10 advisory. - The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x...

kernel security and bug fix update

2.6.32-358.2.1 - kernel utrace: ensure archptrace/ptracerequest can never race with SIGKILL Oleg Nesterov 912073 912074 CVE-2013-0871 2.6.32-358.1.1 - netdrv mlx4: Set number of msix vectors under SRIOV mode to firmware defaults Michal Schmidt 911663 904726 - netdrv mlx4: Fix bridged vSwitch...

CVE-2010-5258

Untrusted search path vulnerability in Adobe Audition 3.0 build 7283.0 allows local users to gain privileges via a Trojan horse Assist.Dll file in the current working directory, as demonstrated by a directory that contains a .ses file. NOTE: some of these details are obtained from third party...

CVE-2010-5258

Untrusted search path vulnerability in Adobe Audition 3.0 build 7283.0 allows local users to gain privileges via a Trojan horse Assist.Dll file in the current working directory, as demonstrated by a directory that contains a .ses file. NOTE: some of these details are obtained from third party...

PT-2012-1468

Name of the Vulnerable Software and Affected Versions Adobe Audition version 3.0 build 7283.0 Description The issue allows local users to gain privileges via a Trojan horse Assist.Dll file in the current working directory. This can be demonstrated by a directory that contains a .ses file...

Buffer overflow

Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted data in unspecified fields in the TRKM chunk in an Audition Session aka .ses file, related to inconsisten...

Adobe Audition buffer overflow

Buffer overflow on .ses files parsing...

CVE-2011-0614: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted Audition Session aka .ses file...

CVE-2011-0615: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted data in unspecified fields in the TRKM chunk in an Audition Session aka .ses file, related to inconsisten...

AIX 610003 : U838964

The remote host is missing AIX PTF U838964 which is related to the security of the package devices.scsi.ses.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 110614-03

SunOS 5.8: ses driver patch. Date this patch was last updated by Sun : Aug/30/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

AIX 530008 : U829561

The remote host is missing AIX PTF U829561 which is related to the security of the package devices.scsi.ses.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2008-6707

CVE-2008-6707 affects Avaya SIP Enablement Services (SES) 3.x and 4.0 when used with Avaya Communication Manager 3.1.x. The issue is that the web management interface does not perform authentication for several functions, allowing remote attackers to access restricted functionality and obtain sen...

CVE-2008-6575

Technical details about CVE-2008-6575 are not publicly provided in the connected documents. The materials only reiterate an unspecified denial-of-service against Avaya SES SIP server. Monitor for updates and new advisories to clarify impact and remediation.

CVE-2008-3777

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

CVE-2008-3778

CVE-2008-3778 affects Avaya SIP Enablement Services (SES) Server 5.0 and Communication Manager 5.0 on the S8300C with SES enabled. The remote management interface can proceed with Core router updates even after an invalid login, enabling remote attackers to cause a messaging outage (DoS) or to ga...

Linux Kernel x86_64 ptrace Denial Of Service Vulnerability

Linux内核存在拒绝服务漏洞，当进程执行在64位的计算机时。 本地攻击者可以利用这个问题的崩溃和内核拒绝服务的合法用户。 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10...

AIX 530005 : U809468

The remote host is missing AIX PTF U809468 which is related to the security of the package devices.scsi.ses.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...