117 matches found
Wireshark Multiple Dissector Multiple Vulnerabilities - Dec12 (Mac OS X)
This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulndec12macosx.nasl 5999 2017-04-21 09:02:32Z teissa $ Wireshark Multiple Dissector Multiple Vulnerabilities - Dec12 Mac OS X Authors: Rachana Shetty Copyright: Copyrigh...
CVE-2012-6057
The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...
CVE-2012-6057
The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...
Integer overflow
The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...
CVE-2012-6057
The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...
UBUNTU-CVE-2012-6057
The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...
CVE-2012-6057
The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...
CVE-2012-6057
The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...
CVE-2012-6057
Wireshark 1.8.x before 1.8.4 contains a vulnerability in the EIGRP dissector (epan/dissectors/packet-eigrp.c) where the code uses the wrong data type for a specific offset. This allows remote attackers to trigger a denial of service via a malformed EIGRP packet (integer overflow and infinite loop...
Wireshark 1.8.x < 1.8.4 Multiple Vulnerabilities
The installed version of Wireshark 1.8 is earlier than 1.8.4. It is, therefore, affected by the following vulnerabilities : - Errors exist related to the USB, sFlow, EIGRP, 3GPP2 A11, SCTP, ICMPv6, iSCSI, WTP and RTCP dissectors that can allow denial of service attacks by putting the application...
broadcast-eigrp-discovery NSE Script
Performs network discovery and routing information gathering through Cisco's Enhanced Interior Gateway Routing Protocol EIGRP. The script works by sending an EIGRP Hello packet with the specified Autonomous System value to the 224.0.0.10 multicast address and listening for EIGRP Update packets. T...
Cisco EIGRP Multiple Vulnerabilities
On December 20 2005, Cisco released a security response for several vulnerabilities in the EIGRP implementation in IOS. Exploitation of these vulnerabilities could result in a denial of service via ARP flooding. This plugin checks if the appropriate fix for the advisory has been installed. C...
CVE-2010-4672
Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier allow remote attackers to cause a denial of service block exhaustion via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269...
Design/Logic Flaw
Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier allow remote attackers to cause a denial of service block exhaustion via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269...
CVE-2010-4672
CVE-2010-4672 affects Cisco ASA 5500 series devices running software 8.2(3) and earlier. The issue allows remote attackers to cause a denial-of-service through EIGRP traffic that triggers an EIGRP multicast storm (block exhaustion). The vulnerability is documented under Bug ID CSCtf20269. Affecte...
PT-2011-1627 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.23 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically block exhaustion, via EIGRP traffic that triggers an EIGRP multicas...
Ethereal EIGRP Dissector TLV_IP_INT Long IP Remote DoS Exploit
No description provided by source. / Ethereal network protocol analyzer EIGRP Dissector TLVIPINT Long IP Address Overflow vulnerability proof of concept code version 1.0 Mar 26 2004 by Rmi Denis-Courmont ethereal at simphalampin dot com www simphalempin com dev This vulnerability was found by:...
FreeBSD : multiple vulnerabilities in ethereal (cdf18ed9-7f4a-11d8-9645-0020ed76ef5a)
Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including : - NetFlow - IGAP - EIGRP - PGM - IRDA - BGP - ISUP - TCAP - UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited...
CVE-2005-4437
MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code MAC in the checksum, which allows remote attackers to sniff message hashes and 1 replay EIGRP HELLO messages or 2 cause...
CVE-2005-4436
Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS after 12.32, 12.33B, and 12.32T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with 1 mismatched k values or 2 "goodbye message" Type-Length-Val...