NTP Daemon Autokey Stack Buffer Overflow (CVE-2009-1252)

The ntpd daemon implements the Network Time Protocol NTP which sets and maintains the system time-of-day in synchronism with Internet standard time servers.A buffer overflow vulnerability has been reported in the ntpd NTP daemon. The vulnerability is due to a boundary error in the ntpd when...

Denial of service

The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition TMG MBE; and Internet Security and Acceleration ISA Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote...

Ubuntu Update for tcpdump vulnerability USN-492-1

Ubuntu Update for Linux kernel vulnerabilities USN-492-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4921.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for tcpdump vulnerability USN-492-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for pwlib vulnerability USN-561-1

Ubuntu Update for Linux kernel vulnerabilities USN-561-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5611.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for pwlib vulnerability USN-561-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

GLSA-200903-29 : BlueZ: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200903-29 BlueZ: Arbitrary code execution It has been reported that the Bluetooth packet parser does not validate string length fields in SDP packets. Impact : A physically proximate attacker using a Bluetooth device with an alrea...

Design/Logic Flaw

Unspecified vulnerability in the Session Border Controller SBC before 3.02 for Cisco 7600 series routers allows remote attackers to cause a denial of service SBC card reload via crafted packets to TCP port 2000...

CVE-2009-0619

Unspecified vulnerability in the Session Border Controller SBC before 3.02 for Cisco 7600 series routers allows remote attackers to cause a denial of service SBC card reload via crafted packets to TCP port 2000...

Wireshark Multiple Vulnerabilities Feb-09 (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnfeb09win.nasl 4970 2017-01-09 15:00:59Z teissa $ Wireshark Multiple Vulnerabilities Feb-09 Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Network...

Wireshark Multiple Vulnerabilities (Feb 2009) - Linux

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Avahi: Denial of service

Background Avahi is a system that facilitates service discovery on a local network. Description Hugo Dias reported a failed assertion in the originatesfromlocallegacyunicastsocket function in avahi-core/server.c when processing mDNS packets with a source port of 0. Impact A remote attacker could...

ZIM Server Multiple Vulnerabilities

The host is installed with ZIM Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbzimservermultvuln800201.nasl 5370 2017-02-20 15:24:26Z cfi $ ZIM Server Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbone Networks GmbH,...

Checkpoint VPN-1 PAT information disclosure

Checkpoint VPN-1 PAT information disclosure By sending crafted packets to ports on the firewall which are mapped by port address translation PAT to ports on internal devices, information about the internal network may be disclosed in the resulting ICMP error packets. Port 18264/tcp on the firewal...

DEBIAN-CVE-2008-4684

packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service application crash via a certain series of packets, as demonstrated by enabling the 1 PRP or 2 MATE post dissector...

CVE-2008-4544

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...

CVE-2008-4544

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...

Code injection

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...

CVE-2008-4544

Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...

CVE-2008-3804

Unspecified vulnerability in the Multi Protocol Label Switching MPLS Forwarding Infrastructure MFI in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service memory corruption via crafted packets for which the software path is used...

Wireshark: Multiple Denials of Service

Background Wireshark is a network protocol analyzer with a graphical front-end. Description The following vulnerabilities were reported: Multiple buffer overflows in the NCP dissector CVE-2008-3146. Infinite loop in the NCP dissector CVE-2008-3932. Invalid read in the tvbuncompress function when...

USN-620-1: OpenSSL vulnerabilities

It was discovered that OpenSSL was vulnerable to a double-free when using TLS server extensions. A remote attacker could send a crafted packet and cause a denial of service via application crash in applications linked against OpenSSL. Ubuntu 8.04 LTS does not compile TLS server extensions by...