PYSEC-2009-9

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...

PYSEC-2009-8

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2009-0669

Removed by vendor...

CVE-2009-0669

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...

CVE-2009-0668

Removed by vendor...

CVE-2009-0668

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2009-0669

CVE-2009-0669 is a ZODB/ZEO authentication bypass vulnerability in ZEO storage servers, present in ZODB versions prior to 3.8.2 when ZEO database sharing is enabled. The issue arises because an internal authorization method in the StorageServer component was not used, allowing a remote attacker t...

CVE-2009-0669

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...

CVE-2009-0668

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

Wireshark: Multiple vulnerabilities

Background Wireshark is a versatile network protocol analyzer. Description Multiple vulnerabilities have been discovered in Wireshark: David Maciejak discovered a vulnerability in packet-usb.c in the USB dissector via a malformed USB Request Block URB CVE-2008-4680. Florent Drouin and David...

VMSA-2009-0008:ESX Service Console update for krb5

VMSA-2009-0008.2 ESX Service Console update for krb5 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0008.2 VMware Security Advisory Synopsis: ESX Service Console update for krb5 VMware Security Advisory Issue date: 2009-06-30 VMware Security Advisory Updated on: 2009-08-...

Wireshark 1.0.7版本修复多个拒绝服务漏洞

BUGTRAQ ID: 34457 CVECAN ID: CVE-2009-1267,CVE-2009-1268,CVE-2009-1269 Wireshark之前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的LDAP和CPHAP协议解析模块中存在拒绝服务漏洞。如果用户受骗从网络抓取了恶意的LDAP或CPHA FWHAMYSTATE报文或读取了恶意抓包文件的话，就会导致解析模块崩溃。此外如果加载了恶意的Tektronix .rf5文件的话Wireshark可能会崩溃。 Wireshark 0.9.6 - 1.0.6 Wireshark ---------...

MIT Kerberos SPNEGO和ASN.1多个拒绝服务漏洞

BUGTRAQ ID: 34408 CVECAN ID: CVE-2009-0844,CVE-2009-0847 Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是一种常用的开源Kerberos实现。 krb5在实现SPNEGO GSS-API机制时getinputtoken函数可能会读过网络输入缓冲区的末尾，如果读取了无效地址空间可能会导致任何使用Kerberos GSS-API库来认证用户的网络服务崩溃。...

Ubuntu Update for linux-source-2.6.15/2.6.17/2.6.20 vulnerabilities USN-464-1

Ubuntu Update for Linux kernel vulnerabilities USN-464-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4641.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15/2.6.17/2.6.20 vulnerabilities USN-464-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

Moderate: Red Hat Security Advisory: pidgin security and bug fix update

Updated Pidgin packages that fix several security issues and bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is a multi-protocol Internet Messaging client. A denial-of-service...

Wireshark / Ethereal Detection (Windows)

Wireshark formerly known as Ethereal is installed on the remote Windows host. Wireshark is a popular open source network protocol analyzer sniffer typically used for network troubleshooting and protocol analysis. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34112;...

[ GLSA 200808-04 ] Wireshark: Denial of Service

Gentoo Linux Security Advisory GLSA 200808-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Wireshark: Denial of service

Background Wireshark is a network protocol analyzer with a graphical front-end. Description Multiple vulnerabilities related to memory management were discovered in the GSM SMS dissector CVE-2008-3137, the PANA and KISMET dissectors CVE-2008-3138, the RTMPT dissector CVE-2008-3139, the syslog...

Wireshark 1.0.1版本修复多个安全漏洞

BUGTRAQ ID: 30020 Wireshark之前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的1.0.1之前版本解析恶意网络报文时存在多个安全漏洞，可能允许攻击者读取敏感信息或导致拒绝服务。 1 GSM SMS协议解析模块中的漏洞可能导致崩溃。 2 PANA和KISMET协议解析模块中的漏洞可能导致Wireshark退出。 3 RTMPT协议解析模块中的释放后使用漏洞可能导致崩溃。 4 RMI协议解析模块中的漏洞可能导致泄露系统内存。 5 syslog协议解析模块中的漏洞可能允许通过不完整的SS7 MSU syslog封装报文导致崩溃。...

Wireshark: Denial of service

Background Wireshark is a network protocol analyzer with a graphical front-end. Description Errors exist in: the X.509sat dissector because of an uninitialized variable and the Roofnet dissector because a NULL pointer may be passed to the gvsnprintf function CVE-2008-1561. the LDAP dissector...