RHEL 2.1 : tcpdump (RHSA-2003:033)

Updated tcpdump, libpcap, and arpwatch packages are available to fix an incorrect bounds check when decoding BGP packets and a possible denial of service. Tcpdump is a command-line tool for monitoring network traffic. The BGP decoding routines in tcpdump before version 3.6.2 used incorrect bounds...

Linksys - DHCP Information Disclosure

Linksys - DHCP Information Disclosure // source: https://www.securityfocus.com/bid/10329/info It has been reported that the built-in DHCP server on these devices are prone to an information disclosure vulnerability. When attempting to exploit this issue, it has been reported that a denial of...

[Full-Disclosure] Zonet ZSR1104WE Router problem

Zonet ZSR1104WE Router does not report inbound connections with their WAN ip address. All inbound connections are posted as the routers LAN address. This issue is a simple one. The ZSR1104WE router with the listed firmware / hardware will not report an inbound TCP/IP connections WAN address. We...

Server Alive week password encryption

Product Description : Servers Alive is an end-to-end network monitor program. Among the many checks it can do: it can monitor any Winsock service, ping a host, check if an NT service/process is running, check the available disk space on a server, retrieve an URL, check your database engine, and...

DSA-478 tcpdump - denial of service

Bulletin has no description...

Multiple vulnerabilities in sysstat

Background sysstat is a package containing a number of performance monitoring utilities for Linux, including sar, mpstat, iostat and sa tools Description There are two vulnerabilities in the way sysstat handles symlinks: 1. The isag utility, which displays sysstat data in a graphical format,...

Low: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix two security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. Two security issues have been found that affect Ethereal. By exploiting these issues it may be possible to make Ethereal crash by injecting an intentionally...

Free Community Detection

Free Community is installed on the remote host. This is an adware program that monitors web traffic, and replaces banner advertisements with advertisements of its choosing. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12014; scriptversion"1.15";...

BetterInternet Software Detection

The remote host is using BetterInternet. This program monitors web traffic, displaying pop-up/pop-under advertisements based on the content. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12011; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate...

BargainBuddy Software Detection

BargainBuddy is installed on the remote host. This is an adware program that monitors web searches and displays advertisements based on the search terms. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12010; scriptversion"1.17";...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix a number of exploitable security issues are now available. Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues, it may be possible to make Ethereal crash or run arbitrary code by injecting...

Moderate: Red Hat Security Advisory: : Updated Ethereal packages fix security issues

Updated Ethereal packages that fix a number of exploitable security issues are now available. Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues, it may be possible to make Ethereal crash or run arbitrary code by injecting...

[Full-Disclosure] OSX 10.3 Personal Firewall.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Panther OSX 10.3 Firewall Configuration App OSX Personal Firewall gives false sense of security due to lack of ICMP and UDP protocol filtering. maki: br00t$ swvers ProductName: Mac OS X ProductVersion: 10.3 BuildVersion: 7B85 Quoting Apple:...

Sustworks Unauthorized Network Monitoring and tcpflow format string attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Sustworks Unauthorized Network Monitoring and tcpflow format string attack Release Date: 08/07/2003 Application: IPNetMonitorX and IPNetSentryX Platform: Mac OS X Severity: Local users can...

X servers may have insecure default configuration of xhosts

Overview Some X server products client software for connecting to a host with Xwindows capabilities may be configured insecurely by default. Description In X windows terminology, the X server is the software which provides "services" to the client, while the X client is the software that makes...

Moderate: Red Hat Security Advisory: : : : Updated tcpdump packages fix various vulnerabilities

Updated tcpdump, libpcap, and arpwatch packages for iSeries and pSeries fix various vulnerabilities. Tcpdump is a command-line tool for monitoring network traffic. The Red Hat tcpdump packages advertise that by default tcpdump will drop permissions to user 'pcap'. Due to a compilation error this...

Portmon file arbitrary read/write access vulnerability

Package: Portmon Auth: http://www.aboleo.net/ Versions: 1.7 prior ? Vulnerability: File arbitrary read/write access vulnerability Portmon is a network service monitoring daemon http://www.aboleo.net/software/portmon/. "In order to use ping support, Portmon must run as root or be installed setuid...

Moderate: Red Hat Security Advisory: tcpdump security update

Updated tcpdump packages that fix an infinite loop vulnerability and drop privileges on startup are now available. Tcpdump is a command-line tool for monitoring network traffic. A vulnerability exists in tcpdump before 3.7.2 and is related to an inability to handle unknown RADIUS attributes...

Activity Monitor 2002 remote Denial of Service

Overview: "Activity Monitor 2002 is a monitoring software system for real time employee monitoring and continuous tracking of users activities on networked computers." More information can be found at www.softactivity.com Vulnerability Description: By connecting TCP port 15163 and sending a long...

Some problems in Privatefirewall 3.0

UkR security team presents: Some problems in Privatefirewall 3.0 /////////////////////////////////////////////////////////////////////////////////////////// Product: Privatefirewall version: 3.0 Vendor : Privacyware http://www.privacyware.com Author : UkR-XblP [email protected] - the chief specialist...