Oracle Linux 5 / 6 : wireshark (ELSA-2011-0013)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0013 advisory. 1.2.13-1.0.1.el60.2 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect packets bug11486 1.2.13-1.1 - fix buffer overflow i...

CentOS 5 / 6 : krb5 (CESA-2013:0942)

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Scientific Linux Security Update : krb5 on SL5.x, SL6.x i386/x86_64 (20130612)

It was found that kadmind's kpasswd service did not perform any validation on incoming network packets, causing it to reply to all requests. A remote attacker could use this flaw to send spoofed packets to a kpasswd service that appear to come from kadmind on a different server, causing the...

Mandriva Linux Security Advisory : dnsmasq (MDVSA-2013:072)

Updated dnsmasq packages fix security vulnerabilities : When dnsmasq before 2.63 is used in conjunctions with certain configurations of libvirtd, network packets from prohibited networks e.g. packets that should not be passed in may be sent to the dnsmasq application and processed. This can resul...

Scientific Linux Security Update : libvirt on SL6.x i386/x86_64 (20130221)

It was discovered that libvirt made certain invalid assumptions about dnsmasq's command line options when setting up DNS masquerading for virtual machines, resulting in dnsmasq incorrectly processing network packets from network interfaces that were intended to be prohibited. This update includes...

Linux Kernel IPv6远程安全绕过漏洞(CVE-2012-4444)

BUGTRAQ ID: 56891 CVECAN ID: CVE-2012-4444 Linux Kernel是Linux操作系统的内核。 Linux Kernel在IPv6的实现上存在安全绕过漏洞，攻击者可利用此漏洞绕过目标防火墙安全限制，并发送恶意网络报文到受影响计算机。 0 Linux kernel = 3.3.5 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/ Ubuntu ------ Ubuntu已经为此发布了一个安全公告（USN-1664-1）以及相应补丁:...

The Broadcom LAN chip BCM4325 AND BCM4329 denial of service vulnerability-vulnerability warning-the black bar safety net

This vulnerability is the Broadcom Wireless card firmware, the model for the BCM4325 and the BCM4329, the attacker can send specific wireless network packets causing a denial of service attack. A major influence on the equipment: BCM4325 Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid...

FlexNet License Server Manager lmgrd Buffer Overflow

This module exploits a vulnerability in the FlexNet License Server Manager. The vulnerability is due to the insecure usage of memcpy in the lmgrd service when handling network packets, which results in a stack buffer overflow. In order to improve reliability, this module will make lots of...

ABB WebWare RobNetScanHost.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ABB WebWare. Authentication is not required to exploit this vulnerability. The specific flaw exists within RobNetScanHost.exe and its parsing of network packets accepted on port 5512. The parsing o...

Ubuntu Update for linux-ti-omap4 USN-1304-1

Ubuntu Update for Linux kernel vulnerabilities USN-1304-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13041.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ti-omap4 USN-1304-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

MS11-082: Vulnerabilities in Host Integration Server could allow denial of service: October 11, 2011

Resolves vulnerabilities in Host Integration Server that could allow denial of service if a remote attacker sent specially crafted network packets to a Host Integration Server listening on UDP port 1478 or TCP ports 1477 and 1478.INTRODUCTIONMicrosoft has released security bulletin MS11-082. To...

wireshark security update

1.2.13-1.0.1.el60.2 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect packets bug11486 1.2.13-1.1 - fix buffer overflow in ENTTEC dissector - Resolves: 667337 1.2.13-1 - upgrade to 1.2.13 - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.11.html - see...

PT-2010-4662 · Microsoft · Windows Media Player +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Player Network Sharing Service versions prior to the fixed version Description: A use-after-free issue in the Media Player Network Sharing Service allows remote attackers to execute arbitrary code via a crafted Real Ti...

ARP Spoof

Added: 08/23/2010 Background The Address Resolution Protocol ARP is used to resolve IP addresses into the hardware addresses which are used for delivering packets on a local network. Problem It is possible to send a computer a forged ARP reply, which is then stored in that computer's cache. This...

FreeBSD Security Advisory (FreeBSD-SA-10:07.mbuf.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:07.mbuf.asc ADV FreeBSD-SA-10:07.mbuf.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:07.mbuf.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

Multiple Tripwire Interactive Games - STEAMCLIENTBLOB Multiple Denial of Service Vulnerabilities

Multiple Tripwire Interactive Games - STEAMCLIENTBLOB Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/41361/info Multiple Tripwire Interactive games are prone to multiple remote denial-of-service vulnerabilities because the applications fail to properly handle...

Multiple Tripwire Interactive Games - 'STEAMCLIENTBLOB' Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/41361/info Multiple Tripwire Interactive games are prone to multiple remote denial-of-service vulnerabilities because the applications fail to properly handle specially crafted network packets. An attacker can exploit these issues to cause the application...

Freeciv 2.2.1 - Multiple Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/41352/info Freeciv is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle specially crafted network packets. An attacker can exploit these issues to cause the applications to become unresponsive or t...

Freeciv 2.2.1 - Multiple Remote Denial of Service Vulnerabilities

Freeciv 2.2.1 - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/41352/info Freeciv is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle specially crafted network packets. An attacker can exploit...

Ubuntu Update for MySQL vulnerabilities USN-950-1

Ubuntu Update for Linux kernel vulnerabilities USN-950-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9501.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for MySQL vulnerabilities USN-950-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...