333 matches found
CVE-2007-6111
Summary: CVE-2007-6111 pertains to multiple vulnerabilities in Wireshark (Ethereal) with remote DoS possibilities. Related connected advisories indicate several CVEs (e.g., 2007-6111, 2007-6112, 2007-6113, 2007-6114, 2007-6115, 2007-6116, 2007-6117, 2007-6118, 2007-6119, 2007-6120, 2007-6121, 2...
CVE-2007-6111
Multiple unspecified vulnerabilities in Wireshark formerly Ethereal allow remote attackers to cause a denial of service crash via 1 a crafted MP3 file or 2 unspecified vectors to the NCP dissector...
CVE-2006-4520
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service daemon crash when the heap is written to a log file...
CVE-2006-4520
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service daemon crash when the heap is written to a log file...
CVE-2006-4520
CVE-2006-4520 affects Novell eDirectory’s NCP handling. Vulnerable products include eDirectory versions 8.7.3 SP9 and 8.8.x prior to 8.8.1 FTF2; the issue lies in processing NCP fragments with a negative length. Remote, unauthenticated attackers can trigger a denial of service by causing the heap...
Novell eDirectory NCP over IP DoS
Malformed fragmented request causes service to crash...
Novell eDirectory NCP碎片长度拒绝服务漏洞
Novell eDirectory是一个的跨平台的目录服务器。 eDirectory产品的NCP功能在处理畸形的碎片请求时存在处理漏洞，远程攻击者可能利用此漏洞导致服务进程崩溃。 eDirectory产品的NCP功能如果收到了特制的输入，eDirectory会向其错误日志报告接受到了有无效长度的碎片，错误消息中包含16进制的碎片内容。但如果长度为负数的话，eDirectory就有可能将数据dump到日志中，导致将大量数据保存到日志。一旦到达了堆的末尾，就会触发内存破坏，服务进程会崩溃。 Novell eDirectory = 8.7.3.8 Novell eDirectory 8.8.1...
CVE-2006-5479
The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP Fragment."...
CVE-2006-4177
Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended...
CVE-2006-5479
The CVE-2006-5479 entry affects Novell eDirectory’s NCP Engine prior to 8.7.3.8 FTF1, where the NCP Fragment handling is vulnerable. This allows remote attackers to trigger a denial-of-service condition. The available documents state the impact as an unspecified DoS and do not provide exploit det...
CVE-2006-5479
The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP Fragment."...
CVE-2006-4177
Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended...
CVE-2006-4177
CVE-2006-4177 affects Novell eDirectory’s NCP engine. The issue is a heap-based buffer overflow triggered by a crafted NCP over IP packet, causing NCP to read more data than intended and allowing remote code execution. Affected software is Novell eDirectory prior to 8.8.1 FTF1; the vendor’s remed...
iDefense Security Advisory 10.21.06: Novell eDirectory NCP over IP length Heap Overflow VulnerabilityiDefense Security Advisory 10.21.06: Novell eDirectory NCP over IP length Heap Overflow Vulnerability
Novell eDirectory NCP over IP length Heap Overflow Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. In addition to LDAP,...
CVE-2006-3630
Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...
DEBIAN-CVE-2006-3630
Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...
CVE-2006-3630
CVE-2006-3630 concerns off-by-one errors in Wireshark/Ethereal dissectors (NCP NMAS and NDPS) affecting versions 0.9.7 through 0.99.0. Connected sources corroborate existence of multiple Ethernet dissector flaws in Wireshark/Ethereal history, including off-by-one issues in NCP NMAS/NDPS, and note...
CVE-2006-3630
Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...
CVE-2006-3630
Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...
Solaris 10 (sparc) : 121236-02
SunOS 5.10: ncp patch. Date this patch was last updated by Sun : Jul/11/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...