CVE-2004-2091

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...

[NEWS] Ethereal Protocol Dissectors Buffer Overflow Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Ethereal: Numerous vulnerabilities

Background Ethereal is a feature rich network protocol analyzer. Description There are numerous vulnerabilities in versions of Ethereal prior to 0.10.11, including: The ANSI A and DHCP dissectors are vulnerable to format string vulnerabilities. The DISTCC, FCELS, SIP, ISIS, CMIP, CMP, CMS, CRMF,...

[SECURITY] [DSA 718-2] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 718-2 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 718-1] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 718-1 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...

CVE-2004-1729

Cross-site scripting XSS vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2004-1729

Nihuo Web Log Analyzer 1.6 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via the User-Agent HTTP header, potentially allowing an attacker to inject arbitrary scripts or HTML. The issue is documented across CVE/NVD entries with the same vector and impact (I: PARTI...

Ethereal: Multiple vulnerabilities

Background Ethereal is a feature rich network protocol analyzer. Description There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.9, including: The COPS dissector could go into an infinite loop CAN-2005-0006. The DLSw dissector could cause an assertion, making Ethereal exi...

Ethereal: Multiple vulnerabilities

Background Ethereal is a feature rich network protocol analyzer. Description There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.8, including: Bug in DICOM dissection discovered by Bing could make Ethereal crash CAN 2004-1139. An invalid RTP timestamp could make Ethereal...

Cross-Site Scripting (XSS) in Nihuo Web Log Analyzer

--------------------------------------------------------------------------- Cross-Site Scripting XSS in Nihuo Web Log Analyzer --------------------------------------------------------------------------- Author: Audun Larsen larsen at xqus dot com Date: Aug 20, 2004 Affected software:...

CVE-2004-1729

Cross-site scripting XSS vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

Nihuo Web Log Analyzer 1.6 - HTML Injection

Nihuo Web Log Analyzer 1.6 - HTML Injection source: https://www.securityfocus.com/bid/10988/info An HTML injection vulnerability is reported in Nihuo Web Log Analyzer. The problem occurs due to a lack of proper sanitization of user-supplied input data. Attackers may potentially exploit this issue...

SUSE-SA:2003:0015: tcpdump

The remote host is missing the patch for the advisory SUSE-SA:2003:0015 tcpdump. The network traffic analyzer tool tcpdump is vulnerable to a denial-of- service condition while parsing ISAKMP or BGP packets. This bug can be exploited remotely by an attacker to stop the use of tcpdump for analyzin...

DSA-528 ethereal - denial of service

Bulletin has no description...

Ethereal: Multiple security problems

Background Ethereal is a feature rich network protocol analyzer. Description There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.5, including: In some cases the iSNS dissector could cause Ethereal to abort. If there was no policy name for a handle for SMB SID snooping it...

DEBIAN-CVE-2003-0989

tcpdump before 3.8.1 allows remote attackers to cause a denial of service infinite loop via certain ISAKMP packets, a different vulnerability than CVE-2004-0057...

CVE-2004-2091

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...

Ethereal: security problems in ethereal 0.9.15

Background Ethereal is a popular network protocol analyzer. Description Ethereal contains buffer overflow vulnerabilities in the GTP, ISAKMP, and MEGACO protocol dissectors, and a heap overflow vulnerability in the SOCKS protocol dissector, which could cause Ethereal to crash or to execute...

Tripbit Secure Code Analizer 1.0 - fgets() Local Buffer Overrun

Tripbit Secure Code Analizer 1.0 - fgets Local Buffer Overrun // source: https://www.securityfocus.com/bid/8028/info A buffer overrun has been discovered in Tripbit Secure Code Analizer when reading data from source files. The problem occurs due to an insecure use of the fgets function. This...

[SECURITY] [DSA-313-1] New ethereal packages fix buffer overflows, integer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 313-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 11th, 2003 http://www.debian.org/security/faq -...