Ubuntu 4.10 : gaim vulnerabilities (USN-85-1)

The Gaim developers discovered that the HTML parser did not sufficiently validate its input. This allowed a remote attacker to crash the Gaim client by sending certain malformed HTML messages. CAN-2005-0208, CAN-2005-0473 Another lack of sufficient input validation was found in the 'Oscar' protoc...

security flaw

Stack-based buffer overflow in the dissectospfv3addressprefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets...

CVE-2005-4564

The CVE-2005-4564 entry concerns the IKEv1 implementation in ADTRAN NetVanta devices prior to version 10.03.03.E, which can be DoS’d by remotely crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Connected documents confirm affected product/line and version range and ...

CVE-2005-4566

Buffer overflow in the Internet Key Exchange version 1 IKEv1 implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1...

CVE-2005-4471

POP3 service in Avaya Modular Messaging Message Storage Server MSS 2.0 SP 4 and earlier allows remote attackers to cause a denial of service infinite loop via crafted packets...

CVE-2005-4471

CVE-2005-4471 concerns the POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP4 and earlier. The vulnerability allows remote attackers to cause a denial-of-service (infinite loop) by sending crafted packets over the network. The available records explicitly identify the af...

CVE-2005-4465

The CVE-2005-4465 entry concerns IKEv1 in NEC UNIVERGE IX1000/IX2000/IX3000, where crafted IKE packets can cause a denial of service and possibly arbitrary code execution, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Connected sources also reference related IKEv1 issues (CVE-2005-36...

CVE-2005-1928

Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service CPU consumption via a flood of crafted packets wit...

CVE-2005-3651

Stack-based buffer overflow in the dissectospfv3addressprefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets...

CVE-2005-3651

Stack-based buffer overflow in the dissectospfv3addressprefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets...

CVE-2005-3985

The CVE-2005-3985 entry concerns the Internet Key Exchange v1 (IKEv1) implementation in Astaro Security Linux prior to 6.102, which can be triggered by crafted IKE packets to cause a denial of service and possibly arbitrary code execution; the advisory notes uncertainty about whether CVE-2005-366...

CVE-2005-3915

The Internet Key Exchange version 1 IKEv1 implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the...

CVE-2005-3915

The Internet Key Exchange version 1 IKEv1 implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the...

CVE-2005-3848

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

CVE-2005-3733

The Internet Key Exchange version 1 IKEv1 implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as...

CVE-2005-3732

Removed by vendor...

CVE-2005-3672

The Internet Key Exchange version 1 IKEv1 implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Stonesoft...

CVE-2005-3672

CVE-2005-3672 concerns the Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1. A remote attacker can cause a denial of service by sending certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. The Stonesoft advisory...

CVE-2004-0498

The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service crash via crafted H.323 packets...

CVE-2005-2242

Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1 allows remote attackers to cause a denial of service memory consumption and restart via crafted packets to 1 the CTI Manager ctimgr.exe or 2 the CallManager ccm.exe...