4483 matches found
Fedora Core 1 : tcpdump-3.7.2-8.fc1.1 (2004-092)
Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities in ISAKMP and RADIUS parsing. Tcpdump is a command-line tool for monitoring network traffic. George Bakos discovered flaws in the ISAKMP decoding routines of tcpdump versions prior to 3.8.1. The Common Vulnerabilities and Exposur...
Fedora Core 1 : tcpdump-3.7.2-8.fc1.2 (2004-120)
Tcpdump is a command-line tool for monitoring network traffic. Tcpdump v3.8.1 and earlier versions contained multiple flaws in the packet display functions for the ISAKMP protocol. Upon receiving specially crafted ISAKMP packets, TCPDUMP would try to read beyond the end of the packet capture buff...
DSA-528 ethereal - denial of service
Bulletin has no description...
MapInfo Discovery 1.01.1 - Remote Log File Access Information Disclosure
MapInfo Discovery 1.01.1 - Remote Log File Access Information Disclosure source: https://www.securityfocus.com/bid/10927/info Multiple remote vulnerabilities are reported in MapInfo Discovery. The first issue is reported to be an information disclosure vulnerability. An attacker may gain access t...
MapInfo Discovery 1.0/1.1 - Administrative Authentication Bypass
source: https://www.securityfocus.com/bid/10927/info Multiple remote vulnerabilities are reported in MapInfo Discovery. The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to potentially sensitive error log information that could aid an attacker ...
RHEL 2.1 / 3 : ethereal (RHSA-2004:136)
Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. Stefan Esser reported that Ethereal versions 0.10.1 and earlier contain stack overflows in the IGRP, PGM, Metflow, ISUP, TCAP, or IGAP dissectors. On a syst...
RHEL 2.1 / 3 : ethereal (RHSA-2004:002)
Updated Ethereal packages that fix two security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. Two security issues have been found that affect Ethereal. By exploiting these issues it may be possible to make Ethereal crash by injecting an intentionally...
RHEL 2.1 : tcpdump (RHSA-2003:085)
Updated tcpdump packages are available to fix a denial of service vulnerability in tcpdump. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Tcpdump is a command-line tool for monitoring network traffic. The ISAKMP parser in tcpdump 3.6 through...
RHEL 2.1 / 3 : tcpdump (RHSA-2004:219)
Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities in ISAKMP parsing. Tcpdump is a command-line tool for monitoring network traffic. Tcpdump v3.8.1 and earlier versions contained multiple flaws in the packet display functions for the ISAKMP protocol. Upon receiving specially...
ToCA Race Driver - Multiple Remote Denial of Service Vulnerabilities
ToCA Race Driver - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/10492/info ToCA Race Driver is reportedly affected by multiple remote denial of service vulnerabilities. These issues are due to a failure of the application to handle exceptional networ...
ToCA Race Driver - Multiple Remote Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/10492/info ToCA Race Driver is reportedly affected by multiple remote denial of service vulnerabilities. These issues are due to a failure of the application to handle exceptional network traffic. These issues may allow an attacker to cause the affected...
DSA-425 tcpdump - multiple vulnerabilities
Bulletin has no description...
CVE-2003-1087
Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows remote attackers to cause a denial of service program failure via certain network traffic...
Apache Httpd < 1.3.31 : mod_digest nonce checking
moddigest does not properly verify the nonce of a client response by using a AuthNonce secret. This could allow a malicious user who is able to sniff network traffic to conduct a replay attack against a website using Digest protection. Note that moddigest implements an older version of the MD5...
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages that fix a number of exploitable security issues are now available. Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues, it may be possible to make Ethereal crash or run arbitrary code by injecting...
Moderate: Red Hat Security Advisory: : Updated Ethereal packages fix security issues
Updated Ethereal packages that fix a number of exploitable security issues are now available. Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues, it may be possible to make Ethereal crash or run arbitrary code by injecting...
[Full-Disclosure] OSX 10.3 Personal Firewall.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Panther OSX 10.3 Firewall Configuration App OSX Personal Firewall gives false sense of security due to lack of ICMP and UDP protocol filtering. maki: br00t$ swvers ProductName: Mac OS X ProductVersion: 10.3 BuildVersion: 7B85 Quoting Apple:...
TCP/IP Multicast Address Handling Remote DoS (spank.c)
Nessus has detected that the remote host responds to TCP packets that are coming from a multicast IP address. An attacker can exploit this to conduct a 'spank' denial of service attack, resulting in the host being shut down or network traffic reaching saturation. Also, this vulnerability can be...
