CVE-2006-3551: Undefined Security Weakness

NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...

Microsoft Excel COLINFO Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability because it fails to handle exceptional conditions. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office...

CentOS 4 : tcpdump (CESA-2005:505)

Updated tcpdump packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Tcpdump is a command line tool for monitoring network traffic. A denial of service bug was found in tcpdump during the processing o...

CentOS 3 / 4 : tcpdump (CESA-2005:417)

Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. This updated package also adds support for output files larger than 2 GB. Tcpdump is a command-line tool for monitoring...

CentOS 3 / 4 : ethereal (CESA-2005:809)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

CentOS 3 / 4 : ethereal (CESA-2005:427)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

CentOS 3 : tcpdump (CESA-2005:421)

Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. These updated packages also add support for output files larger than 2 GB, add support for some new VLAN IDs, and fix...

CentOS 3 / 4 : ethereal (CESA-2006:0420)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...

Authentication flaw

The RedCarpet command-line client rug does not verify SSL certificates from a server, which allows remote attackers to read network traffic and execute commands via a man-in-the-middle MITM attack...

CVE-2006-2703

The RedCarpet command-line client rug does not verify SSL certificates from a server, which allows remote attackers to read network traffic and execute commands via a man-in-the-middle MITM attack...

CVE-2006-2703

The CVE-2006-2703 entry concerns the RedCarpet command-line client (rug), where the SSL certificate verification is not performed by the client when connecting to a server. This weaknesses permits a MITM attacker to read traffic and potentially execute commands through the intercepted connection....

Code injection

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic...

CVE-2006-2462

BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic...

CVE-2006-2461

BEA WebLogic Server prior to 8.1 SP4 has a QoS handling flaw that can prevent SSL-encrypted transmissions, risking exposure of sensitive network traffic. The available documents state the issue and affected version, but do not provide explicit exploit details or a remediation path; no additional ...

CVE-2006-2461

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic...

CVE-2006-2462

BEA WebLogic Server 8.1 (before Service Pack 4) and 7.0 (before Service Pack 6) is affected. The vulnerability arises when using JTA transactions, where sensitive data may be sent over non-secure channels, allowing remote read access to potentially sensitive network traffic. The provided sources ...

CVE-2006-2462

BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2006:0420)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...

ethereal security update

CentOS Errata and Security Advisory CESA-2006:0420-01 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic...

ethereal security update

CentOS Errata and Security Advisory CESA-2006:0420 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic...