DEBIAN-CVE-2009-3550

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

The Migration component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when tracing is enabled and a 6.1 to 7.0 migration has occurred, allows remote authenticated users to obtain sensitive information by reading a Migration Trace file...

CVE-2008-0368

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

Information disclosure

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0368

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2007-6114

CVE-2007-6114 affects Wireshark (formerly Ethereal) versions 0.99.0–0.99.6, with two vulnerable components: the SSL dissector and the iSeries (OS/400) Communication trace file parser. The issue is described as multiple buffer overflows that could be triggered by specially crafted network packets ...

CVE-2007-6114

Multiple buffer overflows in Wireshark formerly Ethereal 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 the SSL dissector or 2 the iSeries OS/400 Communication trace file parser...

CVE-2007-6114

Multiple buffer overflows in Wireshark formerly Ethereal 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 the SSL dissector or 2 the iSeries OS/400 Communication trace file parser...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB07 in the Dictionary component and 2 DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed...

CVE-2006-0261

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB07 in the Dictionary component and 2 DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed...

CVE-2005-3289

LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...

CVE-2005-3289

LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...

ethereal -- multiple protocol dissectors vulnerabilities

An Ethreal Security Advisories reports: Our testing program has turned up several more security issues: The LDAP dissector could free static memory and crash. The AgentX dissector could crash. The 802.3 dissector could go into an infinite loop. The PER dissector could abort. The DHCP dissector...

FreeBSD : ethereal -- multiple vulnerabilities (efa1344b-5477-11d9-a9e7-0001020eed82)

An Ethreal Security Advisories reports : Issues have been discovered in the following protocol dissectors : - Matthew Bing discovered a bug in DICOM dissection that could make Ethereal crash. - An invalid RTP timestamp could make Ethereal hang and create a large temporary file, possibly filling...

CVE-2001-1041

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace .trc file that is created in an alternate home directory identified by the ORACLEHOME environment variable...