MGASA-2014-0267 Updated cups-filter packages fix security vulnerabilities

In cups-filters before 1.0.53, out-of-bounds accesses in the processbrowsedata function when reading the packet variable could leading to a crash, thus resulting in a denial of service CVE-2014-4337. In cups-filters before 1.0.53, if there was only a single BrowseAllow line in cups-browsed.conf a...

MGASA-2014-0181 Updated cups-filters packages fix security vulnerability

Updated cups-filters packages fix security vulnerability: Sebastian Krahmer discovered it was possible to use malicious broadcast packets to execute arbitrary commands on a server running the cups- browsed daemon CVE-2014-2707. Note that only systems that have enabled the affected feature by usin...

Oracle Database Server AUTH_SESSKEY Stack Buffer Overflow - Ver2 (CVE-2009-1979)

A buffer overflow vulnerability has been reported in the Oracle Database server. The vulnerability is due to an error in the Oracle Database server that fails to sufficiently validate the length field of the AUTHSESSKEY parameter. A remote attacker could exploit this vulnerability by sending...

Joomla! Component Module Simple File Upload 1.3 - Remote Code Execution

?PHP / -------------------------------------------------------------------------------- Title: Simple File Upload v1.3 module for joomla Remote Code Execution Exploit -------------------------------------------------------------------------------- Author...............: gmda Google...

Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharklucentascendfileparserdosvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability Windows Authors: Shashi...

Cisco IOS Real-time Transport Protocol Packet Processing Denial of Service Vulnerability

Cisco IOS Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted device. The vulnerability is due to errors in processing malformed packets. An unauthenticated, remote attacker could exploit the vulnerability...

IBM Informix Dynamic Server librpc.dll Multiple Buffer Overflows (CVE-2009-2753)

Informix is a family of relational database management system RDBMS products by IBM. IBM Informix Dynamic Server is an online transaction processing data server. Multiple buffer overflow vulnerabilities has been reported in IBM's Informix Dynamic Server. The vulnerabilities are due to insufficien...

Mandriva Update for wireshark MDVSA-2008:215 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2008:215 wireshark Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Code injection

Unspecified vulnerability in the JDBC Applet Server Service aka db2jds in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service service crash via "malicious packets."...

GLSA-200605-13 : MySQL: Information leakage

The remote host is affected by the vulnerability described in GLSA-200605-13 MySQL: Information leakage The processing of the COMTABLEDUMP command by a MySQL server fails to properly validate packets that arrive from the client via a network socket. Impact : By crafting specific malicious packets...

ethereal security update

CentOS Errata and Security Advisory CESA-2005:687 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

Tcpdump 3.x - L2TP Parser Remote Denial of Service

Tcpdump 3.x - L2TP Parser Remote Denial of Service source: https://www.securityfocus.com/bid/9263/info A vulnerability has been reported to exist in the software that may allow a remote attacker to cause a denial of service condition in tcpdump. The issue presents itself when an attacker sends a...

EZPhotoShare 1.0/1.1 - Memory Corruption

source: https://www.securityfocus.com/bid/9150/info eZphotoshare has been reported prone to multiple remote memory corruption vulnerabilities. The issues present themselves in the routines employed by eZphotoshare to handle network based communications. It has been reported that a remote attacker...

Cisco IOS 101112 - UDP Echo Service Memory Disclosure

Cisco IOS 101112 - UDP Echo Service Memory Disclosure source: https://www.securityfocus.com/bid/8323/info It has been reported that under some circumstances, a Cisco appliance running IOS may answer malicious malformed UDP echo packets with replies that contain partial contents from the affected...

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (1)

source: https://www.securityfocus.com/bid/7180/info A buffer-overflow vulnerability has been discovered in Kerio Personal Firewall. The problem occurs during the administration authentication process. An attacker could exploit this vulnerability by forging a malicious packet containing an excessi...

CVE-2000-0150

Check Point FireWall-1 is affected by CVE-2000-0150, where the FTP PASV handling flaw in stateful inspection allows remote attackers to bypass FTP data-connection restrictions by causing the firewall to misinterpret crafted packets as a valid PASV response. The vulnerability stems from layering v...

CVE-1999-0444

CVE-1999-0444 : Multiple sources (including PT-1999-1127) confirm a denial-of-service through spoofed ARP packets on Windows. The vulnerability enables remote attackers to trigger a splash/message box per ARP packet or flood log files, causing instability. The available connected documents do not...

PT-1999-1127 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue allows remote attackers to perform a denial of service on Windows machines by sending malicious ARP packets. This can result in a message box being displayed for each packet or lo...