Low: Red Hat Security Advisory: wireshark security and bug fix update

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

CVE-2006-7229

The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spinlock and spinunlock functions, which allows remote attackers to cause a denial of service machine crash via a flood of network traffic...

CVE-2006-7229

The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spinlock and spinunlock functions, which allows remote attackers to cause a denial of service machine crash via a flood of network traffic...

CVE-2006-7229

The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spinlock and spinunlock functions, which allows remote attackers to cause a denial of service machine crash via a flood of network traffic...

Microsoft Windows Recursive DNS Spoofing Vulnerability

Description Microsoft Windows DNS Server is prone to a vulnerability that permits an attacker to spoof responses to DNS requests. A successful attack will corrupt the DNS cache with attacker-specified content. This may aid in further attacks such as phishing. Technologies Affected Avaya Messaging...

Ubuntu 6.06 LTS / 6.10 / 7.04 : linux-restricted-modules-2.6.15/.17/.20 vulnerabilities (USN-479-1)

Multiple flaws in the MadWifi driver were discovered that could lead to a system crash. A physically near-by attacker could generate specially crafted wireless network traffic and cause a denial of service. CVE-2006-7177, CVE-2006-7178, CVE-2006-7179, CVE-2007-2829, CVE-2007-2830 A flaw was...

RHEL 5 : wireshark (RHSA-2007:0710)

New Wireshark packages that fix various security vulnerabilities are now available for Red Hat Enterprise Linux 5. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring...

Low: Red Hat Security Advisory: wireshark security update

New Wireshark packages that fix various security vulnerabilities are now available for Red Hat Enterprise Linux 5. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring...

CVE-2002-2380

NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic...

CVE-2002-2326

The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic...

CVE-2002-2326

The CVE concerns Mail.app in macOS X 10.0–10.0.4 and 10.1–10.1.5, where iDisk credentials are sent in cleartext when connecting to Mac.com. The root cause is the default Mail.app configuration allowing unencrypted authentication, enabling an attacker on the network to sniff passwords. The provide...

Design/Logic Flaw

Cisco Firewall Services Module FWSM 3.16, and 3.22 and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536...

openSUSE 10 Security Update : openssh (openssh-2183)

Several security problems were fixed in OpenSSH : - CVE-2006-4924: A denial of service problem has been fixed in OpenSSH which could be used to cause lots of CPU consumption on a remote openssh server. - CVE-2006-4925: If a remote attacker is able to inject network traffic this could be used to...

CVE-2002-2254

The CVE describes a vulnerability in the Linux kernel’s Netfilter/IPTables: the experimental IP packet queuing feature in kernels 2.4 (up to 2.4.19) and 2.5 (up to 2.5.31). If a privileged process exits while traffic is not queued, a later process with the same PID may access network traffic that...

Code injection

Unspecified vulnerability in the embedded service processor SP before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy...

CVE-2007-5170

Unspecified vulnerability in the embedded service processor SP before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy...

CVE-2007-5170

Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) before firmware 3.09 contain an unspecified vulnerability that allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy. The description is explicit but does not provide exploit vectors, affected compo...

CVE-2007-5170

Unspecified vulnerability in the embedded service processor SP before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy...

Cisco Adaptive Security Appliance insecurely logs passwords

Overview The Cisco Adaptive Security Appliance ASA firewall may log user credentials, including passwords, as plain text when AAA authentication is enabled. Description The Cisco Adapative Security Appliance ASA is a firewall with Intrusion Protection System IPS, Stateful Packet Inspection SPI, a...

USN-510-1: Linux kernel vulnerabilities

A flaw was discovered in the PPP over Ethernet implementation. Local attackers could manipulate ioctls and cause kernel memory consumption leading to a denial of service. CVE-2007-2525 An integer underflow was discovered in the cpuset filesystem. If mounted, local attackers could obtain kernel...