486 matches found
CVE-2007-6119
The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...
CVE-2007-6119
CVE-2007-6119:Wireshark (formerly Ethereal) before 0.99.7 is affected; the DCP ETSI dissector in 0.99.6 can cause denial of service (long loop/resource consumption) via unknown vectors. Public advisories (RHSA/CESA/MDA etc.) indicate upgrading to Wireshark 0.99.7 or later mitigates the issue. Oth...
RHEL 4 : wireshark (RHSA-2007:0709)
New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...
wireshark security update
CentOS Errata and Security Advisory CESA-2007:0709 New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the...
Low: Red Hat Security Advisory: wireshark security and bug fix update
New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...
CVE-2003-1536
CVE-2003-1536 affects Codeworx Technologies DCP-Portal 5.3.1. Two reflected XSS flaws exist: (1) q parameter in search.php and (2) year parameter in calendar.php are not properly sanitized, allowing remote attackers to inject arbitrary scripts/HTML in a victim’s browser. CVSS v2 base score 4.3 (M...
CVE-2003-1536
Multiple cross-site scripting XSS vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php and 2 the year parameter to calendar.php...
Fedora 7 : wireshark-0.99.6-1.fc7 (2007-0982)
multiple security issues fixed - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshark could loop excessively while reading a...
GLSA-200708-12 : Wireshark: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200708-12 Wireshark: Multiple vulnerabilities Wireshark doesn't properly handle chunked encoding in HTTP responses CVE-2007-3389, iSeries capture files CVE-2007-3390, certain types of DCP ETSI packets CVE-2007-3391, and SSL or MMS...
Wireshark: Multiple vulnerabilities
Background Wireshark is a network protocol analyzer with a graphical front-end. Description Wireshark doesn't properly handle chunked encoding in HTTP responses CVE-2007-3389, iSeries capture files CVE-2007-3390, certain types of DCP ETSI packets CVE-2007-3391, and SSL or MMS packets CVE-2007-339...
Fedora Core 6 : wireshark-0.99.6-1.fc6 (2007-628)
Upgrade to 0.99.6 due to multiple security issues. - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshark could loop excessively whil...
Wireshark多个协议处理模块远程拒绝服务漏洞
BUGTRAQ ID: 24662 CVECAN ID: CVE-2007-3389,CVE-2007-3390,CVE-2007-3391,CVE-2007-3392,CVE-2007-3393 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的多个协议解析模块实现上存在漏洞，远程攻击者可能利用此漏洞导致控制用户机器。 如果处理了HTTP响应中的分块编码、特制iSeries抓包文件、畸形DCP...
CVE-2007-3391
Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...
Design/Logic Flaw
Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...
CVE-2007-3391
Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...
CVE-2007-3391
Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...
CVE-2007-3391
Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...
CVE-2007-3391
Wireshark 0.99.5 is affected by CVE-2007-3391 due to a malformed DCP ETSI packet that can trigger an infinite loop, causing memory exhaustion (denial of service). The issue is addressed in later Wireshark releases (e.g., upgrade to 0.99.6 and later fixes noted in advisories). Affected platforms i...
CVE-2007-2278
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the path parameter to library/adodb/adodb.inc.php, 2 the abspatheditor parameter to library/editor/editor.php, or 3 the cfgfiletoload parameter to...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the path parameter to library/adodb/adodb.inc.php, 2 the abspatheditor parameter to library/editor/editor.php, or 3 the cfgfiletoload parameter to...