[SECURITY] [DSA 3505-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3505-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 04, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3505-1 (wireshark - security update)

Multiple vulnerabilities were discovered in the dissectors/parsers for Pcapng, NBAP, UMTS FP, DCOM, AllJoyn, T.38, SDP, NLM, DNS, BED, SCTP, 802.11, DIAMETER, VeriWave, RVSP, ANSi A, GSM A, Ascend, NBAP, ZigBee ZCL and Sniffer which could result in denial of service. OpenVAS Vulnerability Test $I...

DSA-3505-1 wireshark - security update

Bulletin has no description...

besser.tsoa.nyu.edu XSS vulnerability

Vulnerable URL: http://besser.tsoa.nyu.edu/T-Shirts/index.cgi?type=or=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

investor.t-mobile.com Open Redirect vulnerability

Vulnerable URL: http://investor.t-mobile.com/PDFPageView.aspx?iid=4091145=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 5 VIP website...

t-vec.com XSS vulnerability

Vulnerable URL: https://www.t-vec.com/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

Wireshark 1.12.x < 1.12.9 Multiple DoS

The version of Wireshark installed on the remote Windows host is 1.12.x prior to 1.12.9. It is, therefore, affected by multiple denial of service vulnerabilities in the following components : - 802.11 dissector - AllJoyn dissector - ANSI A dissector - Ascend file parser - BER dissector - DCOM...

Wireshark T.38 Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. Wireshark version 1.12.x prior to 1.12.9, the function initt38infoconv in epan/dissectors/packet-t38.c in the T.38 parser fails to ensure that the conversation exits or not, and by constructing a packet, a remote attacker can cause a denial o...

CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

DEBIAN-CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Code injection

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8716

Wireshark 1.12.x before 1.12.9 is vulnerable to CVE-2015-8716. The init_t38_info_conv function in epan/dissectors/packet-t38.c does not ensure a conversation exists, enabling remote attackers to crash the application via a crafted T.38 packet. Remediation per the linked description is to upgrade ...

CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

investor.t-mobile.com Open Redirect vulnerability

Vulnerable URL: http://investor.t-mobile.com/PDFPageView.aspx?iid=4091145=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 16.03.2016 Latest check for patch:| 16.03.2016 03:30 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Ran...

lookup.t-mobile.com XSS vulnerability

Vulnerable URL: http://lookup.t-mobile.com/web.php?direct=1=data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTUE9TRUQvKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| Yes, at 06.06.2016 Latest check for patch:| 06.06.2016 18:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

lookup.t-mobile.com Open Redirect vulnerability

Vulnerable URL: http://lookup.t-mobile.com/web.php?direct=1=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 06.06.2016 Latest check for patch:| 06.06.2016 18:16 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

t-logistik.se XSS vulnerability

Vulnerable URL: http://t-logistik.se/?p="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check t-logistik.se...

t-shirtforums.com vulnerability

Vulnerable URL: http://www.t-shirtforums.com/redirect-to/?redirect=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 35914 Google Pagerank| 4 VIP website status:| Yes Check...

davidtsmith.com XSS vulnerability

Vulnerable URL: https://www.davidtsmith.com/newsite/orderchair3.asp?ProdID=CH-180.jpg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...