Wireshark 1.2.0多个安全漏洞

Bugraq ID: 35748 Wireshark是一款开放源代码的协议处理程序。 Wireshark存在多个安全问题，远程攻击者可以利用漏洞使应用程序崩溃。 -IPMI解析器存在数组索引错误，发送特殊构建的网络报文可导致应用程序崩溃。 -蓝牙L2CAP, RADIUS, MIOP和sFlow解析器存在错误，通过发送特殊构建的网络报文可导致应用程序崩溃或挂起。 -AFS解析器存在错误可导致应用程序崩溃。 -Infiniband解析器存在错误，发送特殊构建的网络报文可导致部分平台上的应用程序崩溃。 Wireshark Wireshark 1.2 Wireshark Wireshark...

Wireshark Multiple Vulnerabilities - July09 (Linux)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwiresharkmultvulnjul09lin.nasl 5148 2017-01-31 13:16:55Z teissa $ Wireshark Multiple Vulnerabilities - July09 Linux Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

Wireshark Multiple Vulnerabilities (Jul 2009) - Linux

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

CVE-2009-2560

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service application crash via a file that records a malformed packet trace and is processed by the 1 Bluetooth L2CAP, 2 RADIUS, or 3 MIOP dissector. NOTE: it was later reported that the RADIUS issu...

Code injection

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service application crash via a file that records a malformed packet trace and is processed by the 1 Bluetooth L2CAP, 2 RADIUS, or 3 MIOP dissector. NOTE: it was later reported that the RADIUS issu...

CVE-2009-2560

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service application crash via a file that records a malformed packet trace and is processed by the 1 Bluetooth L2CAP, 2 RADIUS, or 3 MIOP dissector. NOTE: it was later reported that the RADIUS issu...

CVE-2009-2560

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service application crash via a file that records a malformed packet trace and is processed by the 1 Bluetooth L2CAP, 2 RADIUS, or 3 MIOP dissector. NOTE: it was later reported that the RADIUS issu...

CVE-2009-2560

CVE-2009-2560 involves multiple, unspecified vulnerabilities in Wireshark that allow remote attackers to cause a denial of service (application crash) by processing a malformed packet trace file via the Bluetooth L2CAP, RADIUS, or MIOP dissectors. The RADIUS issue was also reported to affect olde...

CVE-2009-2560

Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service application crash via a file that records a malformed packet trace and is processed by the 1 Bluetooth L2CAP, 2 RADIUS, or 3 MIOP dissector. NOTE: it was later reported that the RADIUS issu...

Wireshark / Ethereal 0.9.2 to 1.2.0 Multiple Vulnerabilities

The installed version of Wireshark or Ethereal is affected by multiple issues : - The IPMI dissector could overrun a buffer. Bug 3559 - The AFS dissector could crash. Bug 3564 - The Infiniband dissector could crash on some platforms. - The Bluetooth L2CAP dissector could crash. Bug 3572 - The...

Linux Kernel L2CAP和HCI Setsockopt内存泄露信息泄露漏洞

Linux是一款开放源代码的操作系统。 Linux蓝牙部分的L2CAP和HCI setsockopt存在信息泄露问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Linux kernel 2.4.34 Linux kernel 2.4.34 Linux kernel 2.4.34 Linux kernel 2.4.33 2 Linux kernel 2.4.33 .7 Linux kernel 2.4.33 .6 Linux kernel 2.4.33 .6 Linux kernel 2.4.33 .5 Linux kernel 2.4.33 .4 Lin...

Stack overflow

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copyfromuser function accessing an uninitialized stack buffer...

CVE-2007-1353

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copyfromuser function accessing an uninitialized stack buffer...

CVE-2006-3146

The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service reboot via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was...

Toshiba bluetooth stack buffer overflow

"BlueSmack" attack L2CAP echo request large payload causes buffer overflow...

Ubuntu 4.10 / 5.04 / 5.10 : bluez-hcidump vulnerability (USN-256-1)

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

USN-256-1: bluez-hcidump vulnerability

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

CVE-2006-0797

The CVE-2006-0797 entry concerns Nokia N70 devices where a remote attacker can cause a denial of service (reboot or shutdown) via a malformed L2CAP packet over Bluetooth. The root cause is a mismatch: the packet length field is shorter than the actual packet, which can trigger a buffer overflow i...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

Buffer overflow

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...