Mandriva Linux Security Advisory : wireshark (MDVSA-2013:296)

Multiple vulnerabilities was found and corrected in Wireshark : The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service...

[SECURITY] Fedora 19 Update: wireshark-1.10.2-6.fc19

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Debian Security Advisory DSA 2734-1 (wireshark - several vulnerabilities)

Multiple vulnerabilities were discovered in the dissectors for DVB-CI, GSM A Common and ASN.1 PER and in the Netmon file parser. OpenVAS Vulnerability Test $Id: deb2734.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2734-1 using nvtgen 1.0 Script version: 1.0 Author:...

CVE-2013-4930

The CVE-2013-4930 issue affects Wireshark/DVB-CI dissector (epan/dissectors/packet-dvbci.c). A length value is not validated before being decremented in dissect_dvbci_tpdu_hdr, enabling a crafted packet to trigger an assertion failure and application exit (DoS). Affected versions: Wireshark 1.8.x...

Intercepter-NG New Sniffing Tool

Intercepter-NG New Sniffing Tool Intercepter-NG offers the following features: + Sniffing passwords\hashes of the types: ICQ\IRC\AIM\FTP\IMAP\POP3\SMTP\LDAP\BNC\SOCKS\HTTP\WWW\NNTP\CVS\TELNET\MRA\DC++\VNC\MYSQL\ORACLE + Sniffing chat messages of ICQ\AIM\JABBER\YAHOO\MSN\IRC\MRA +...

gsc-kick.txt

Name: Michael Gray Website: www.ownerarium.net Contact: [email protected] Discovered Exploit: 06-05-2008 Vulnerable Software Title: GSC Vulnerable Version: = 2067 Severity: CRITICAL Website: http://www.getgsc.com Reported to vendor: Yes Actively exploited: Yes Exploit Discovery...

Snort GRE报文解码整数溢出漏洞

Snort是广泛部署的开放源码网络入侵检测系统（IDS）。很多其他IDS产品中也使用了Snort及其组件。 Snort的decode.c文件中DecodeGRE函数在解码GRE协议时存在整数溢出漏洞，攻击者可能利用此漏洞获取某些敏感信息。 漏洞相关代码如下： ==BEGIN CODE== ... line 3459 decode.c void DecodeGREuint8t pkt, const uint32t len, Packet p uint8t flags; uint32t hlen; / GRE header length / uint32t payloadlen;...

IP address of recon and hidden Experiences to talk about-vulnerability warning-the black bar safety net

In the formal variety of“hacking”before, hackers will take a variety of means, the probeyou can also say“scouting”the other side of the host information in order to decide what the most effective method to achieve their own purposes. A look at how hackers learn the most basic network...

DSA-990-1 bluez-hcidump - programming error

Bulletin has no description...

Snort <= 2.4.0 SACK TCP Option Error Handling

Snort = 2.4.0 SACK TCP Option Error Handling Package: Snort 2.4.0 And previous versions Vendor url: http://www.snort.org Class: Error Handling Exceptional Conditions Risk: High Credits: A. Alejandro Hernndez Hernndez Contact: nitrousatvulnfactdotcom BACKGROUND Snort is an open source network...

Buffer overflow in ssldump

Buffer overflow on SSL packets analysis...

RFP2K05 - NetProwler "Fragmentation" Issue

NetProwler 3.0 will crash if the Man-in-the-Middle signature encounters a packet for which the following expression evaluates to true: IPHEADERLENGTH + TCPHEADERLENGTH IPTOTALLENGTH This is not a packet fragmentation problem. It is an issue with specific malformed packets. This problem has been...