562 matches found
CVE-2010-2284
Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors...
[ MDVSA-2010:113 ] wireshark
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:113 http://www.mandriva.com/security/ Package : wireshark Date : June 10, 2010 Affected: 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: This advisory updates wireshark to the lates...
Wireshark / Ethereal < 1.0.14 / 1.2.9 Multiple Vulnerabilities
The installed version of Wireshark or Ethereal is potentially affected by multiple vulnerabilities. - The SMB dissector can be affected by a NULL pointer dereference. Bug 4734 - The ANS.1 BER dissector can be affected by a buffer overflow. - The SMB PIPE dissector can be affected by a NULL pointe...
SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12222)
This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...
openSUSE Security Update : openldap2 (openldap2-145)
This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...
Cross site scripting
Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-5799
CVE-2008-5799 is an XSS vulnerability in the TYPO3 extension Wir ber uns (fsmi_people) version 0.0.24 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, the impact is partial integrity with no confidentiality/availabili...
CVE-2008-5799
Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-5800
CVE-2008-5800 refers to a SQL injection vulnerability in the TYPO3 extension fsmi_people (Wir ber uns) version 0.0.24 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lists a Base Score of 7.5 (HIGH) with network attack vector,...
TYPO3 Security Bulletin
Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...
openSUSE 10 Security Update : openldap2 (openldap2-5509)
This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...
SuSE 10 Security Update : OpenLDAP 2 (ZYPP Patch Number 5511)
This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...
OpenLDAP ber_get_next BER Decoding Denial of Service
A denial of service vulnerability exists in OpenLDAP. OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol LDAP service. LDAP messages are defined using Abstract Syntax Notation One ASN.1. OpenLDAP fails to properly handle crafted ASN.1 packets, allowing remote...
OpenLDAP BER Decoding Remote DoS Vulnerability
This vulnerability allows remote attackers to deny services on vulnerable installations of OpenLDAP. Authentication is not required to exploit this vulnerability. The specific flaw exists in the decoding of ASN.1 BER network datagrams. When the size of a BerElement is specified incorrectly, the...
GLSA-200808-09 : OpenLDAP: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200808-09 OpenLDAP: Denial of Service vulnerability Cameron Hotchkies discovered an error within the parsing of ASN.1 BER encoded packets in the 'bergetnext' function in libraries/liblber/io.c. Impact : A remote unauthenticated...
OpenLDAP: Denial of Service vulnerability
Background OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol. Description Cameron Hotchkies discovered an error within the parsing of ASN.1 BER encoded packets in the "bergetnext" function in libraries/liblber/io.c. Impact A remote unauthenticated...
OpenLDAP slapd DoS
Crash on ASR.1 BER data processing...
USN-634-1: OpenLDAP vulnerability
Cameron Hotchkies discovered that OpenLDAP did not correctly handle certain ASN.1 BER data. A remote attacker could send a specially crafted packet and crash slapd, leading to a denial of service...
