Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4873 State: PUBLISHED Published: 2013-07-18T14:00:00 Last Updated: 2024-08-06T16:59:40.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95374 - http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users - https://itunes.apple.com/us/app/tumblr/id305343404 - http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/85823
CVE ID: CVE-2013-4874 State: PUBLISHED Published: 2013-07-18T14:00:00 Last Updated: 2024-08-06T16:59:40.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-997M5B - http://www.kb.cert.org/vuls/id/458007 - http://www.securityfocus.com/bid/61169
CVE ID: CVE-2013-4875 State: PUBLISHED Published: 2013-07-18T14:00:00 Last Updated: 2024-08-06T16:59:40.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-997M5B - http://www.kb.cert.org/vuls/id/458007 - http://www.securityfocus.com/bid/61169
CVE ID: CVE-2013-4876 State: PUBLISHED Published: 2013-07-18T14:00:00Z Last Updated: 2024-09-16T19:14:06.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-997M5B - http://www.kb.cert.org/vuls/id/458007
CVE ID: CVE-2013-4877 State: PUBLISHED Published: 2013-07-18T14:00:00 Last Updated: 2024-08-06T16:59:40.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-997M5B - http://www.kb.cert.org/vuls/id/458007 - http://www.securityfocus.com/bid/61169
CVE ID: CVE-2013-4878 State: PUBLISHED Published: 2013-07-18T16:00:00Z Last Updated: 2024-09-16T16:42:56.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2012-1823. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/21 - http://www.kb.cert.org/vuls/id/673343 - http://kb.parallels.com/116241
CVE ID: CVE-2013-4879 State: PUBLISHED Published: 2013-08-13T18:00:00 Last Updated: 2024-08-06T16:59:40.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/commit/c5f27bf66a7f35bd3daeb5f693f3e2493f51b1f3 - http://osvdb.org/96007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86285 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0039.html - https://www.htbridge.com/advisory/HTB2316
ies/86285 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0039.html - https://www.htbridge.com/advisory/HTB23165
CVE ID: CVE-2013-4880 State: PUBLISHED Published: 2013-08-13T18:00:00 Last Updated: 2024-08-06T16:59:40.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in core/admin/modules/developer/modules/views/add.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/96008 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0039.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86287 - https://www.htbridge.com/advisory/HTB23165 - https://github.com/bigtreecms/BigTree-CMS/commit/8
/vulnerabilities/86287 - https://www.htbridge.com/advisory/HTB23165 - https://github.com/bigtreecms/BigTree-CMS/commit/8a59c2e13f8e151b6a9e98f73e641e1ec8d928df
CVE ID: CVE-2013-4881 State: PUBLISHED Published: 2013-08-19T00:00:00 Last Updated: 2024-08-06T16:59:40.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/commit/4b0faa90fa8b9e1776c86db716894dcd7e6b4834 - http://osvdb.org/96009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86286 - http://arch
6db716894dcd7e6b4834 - http://osvdb.org/96009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86286 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0039.html - https://www.htbridge.com/advisory/HTB23165
CVE ID: CVE-2013-4882 State: PUBLISHED Published: 2013-07-21T20:00:00 Last Updated: 2024-08-06T16:59:40.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10043 - http://www.
otes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10043 - http://www.securityfocus.com/archive/1/527228 - http://www.securitytracker.com/id/1028803
CVE ID: CVE-2013-4883 State: PUBLISHED Published: 2013-07-21T20:00:00 Last Updated: 2024-08-06T16:59:40.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent (MA) 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the (1) instanceId parameter core/loadDisplayType.do; (2) instanceId or (3) monitorUrl parameter to console/createDashboardContainer.do; uid parameter to (4) ComputerMgmt/sysDetPanelBoolPie.do or (5) ComputerMgmt/sysDetPanelSummary.do; (6) uid, (7) orion.user.security.token, or (8) ajaxMode paramet
nelBoolPie.do or (5) ComputerMgmt/sysDetPanelSummary.do; (6) uid, (7) orion.user.security.token, or (8) ajaxMode parameter to ComputerMgmt/sysDetPanelQry.do; or (9) uid, (10) orion.user.security.token, or (11) ajaxMode parameter to ComputerMgmt/sysDetPanelSummary.do. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95190 - http://osvdb.org/95188 - http://osvdb.org/95187 - http://osvdb.org/95191 - http://osvdb.org/95189 - http://www.securityfocus.com/archive/1/527228 - http://www.securitytracker.com/id/1028803 - https://kc.mcafee.com/corporate/index?page=content&id=KB78824
CVE ID: CVE-2013-4884 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T16:59:40.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in McAfee SuperScan 4.0 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded sequences in a server response, which is not properly handled in the SuperScan HTML report. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Aug/68 - http://www.securityfocus.com/bid/61640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86257 - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-024.txt - http://www.
orce.ibmcloud.com/vulnerabilities/86257 - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-024.txt - http://www.exploit-db.com/exploits/27406 - https://kc.mcafee.com/corporate/index?page=content&id=KB78992
CVE ID: CVE-2013-4885 State: PUBLISHED Published: 2013-10-26T17:00:00 Last Updated: 2024-08-06T16:59:40.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt - http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html - ht
nsuse.org/opensuse-updates/2013-10/msg00030.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html - http://packetstormsecurity.com/files/122719/TWSL2013-025.txt - http://nmap.org/changelog.html - https://github.com/drk1wi/portspoof/commit/1791fe4e2b9e5b5c8e000551ab60a64a29d924c3
CVE ID: CVE-2013-4887 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T16:59:40.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86777 - http://www.securityfocus.com/bid/62071 - http://infosec42.blogspot.com/2013/08/exploit-xibo-digital-signage-sql.html
CVE ID: CVE-2013-4888 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T16:59:40.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the layout parameter in the layout page. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.com/2013/08/exploit-xibo-digital-signage-sql.html
CVE ID: CVE-2013-4889 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T16:59:41.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new administrator via the AddUser action or (2) conduct cross-site scripting (XSS) attacks, as demonstrated by CVE-2013-4888. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.com/2013/08/exploit-xibo-digital-signage-sql.html
CVE ID: CVE-2013-4890 State: PUBLISHED Published: 2013-07-22T19:00:00Z Last Updated: 2024-09-17T01:56:55.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DMCRUIS/0.1 web server on the Samsung PS50C7700 TV allows remote attackers to cause a denial of service (daemon crash) via a long URI to TCP port 5600. Additional Analyst Notes: - CVE Program Container: References: - http://www.mmeit.be/exploits/samsungtv_reset.txt
CVE ID: CVE-2013-4891 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-06T16:59:41.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechanism and conduct cross-site scripting (XSS) attacks via an unclosed HTML tag. Additional Analyst Notes: - CVE Program Container: References: - https://nealpoole.com/blog/2013/07/codeigniter-21-xss-clean-filter-bypass/ - https://github.com/bcit-ci/CodeIgniter/issues/4020 - https://www.codeigniter.com/userguide2/changelog.html
CVE ID: CVE-2013-4897 State: REJECTED Published: 2013-07-31T19:00:00Z Last Updated: 2024-09-17T03:55:10.108Z Description: No description available.
CVE ID: CVE-2013-4898 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T16:59:41.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in public/temporary/timeline/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/527791 - http://www.exploit-db.com/exploits/27272/
CVE ID: CVE-2013-4899 State: PUBLISHED Published: 2013-09-09T17:00:00Z Last Updated: 2024-09-16T18:18:10.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the gallery/ page. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23166 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0128.html - http://secunia.com/advisories/54404
CVE ID: CVE-2013-4900 State: PUBLISHED Published: 2013-09-09T17:00:00Z Last Updated: 2024-09-16T19:30:14.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c (dot dot encoded backslash) in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27777 - https://www.htbridge.com/advisory/HTB23167 - http://secunia.com/advisories/54404 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0126.html
CVE ID: CVE-2013-4911 State: PUBLISHED Published: 2013-07-31T18:00:00 Last Updated: 2024-08-06T16:59:41.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product. Additional Analyst Notes: - CVE Program Container: References: - http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html - http://www.securityfocus.com/bid/61536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86099 - http://www.siemens.co
p://www.securityfocus.com/bid/61536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86099 - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdf - http://secunia.com/advisories/54051 - https://ics-cert.us-cert.gov/advisories/ICSA-13-213-02 - http://secunia.com/advisories/54252
CVE ID: CVE-2013-4912 State: PUBLISHED Published: 2013-07-31T18:00:00 Last Updated: 2024-08-06T16:59:40.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product. Additional Analyst Notes: - CVE Program Container: References: - http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdf - http://www.se
//www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdf - http://www.securityfocus.com/bid/61535 - http://secunia.com/advisories/54051 - https://ics-cert.us-cert.gov/advisories/ICSA-13-213-02 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86100 - http://secunia.com/advisories/54252
CVE ID: CVE-2013-4920 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:41.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8826 - http://secunia.com/advisories/54425 - https://www.wireshark.org/security/wnpa-sec-2013-42.html - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-2013
2.html - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17089 - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50083
CVE ID: CVE-2013-4921 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c in the Radiotap dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17514 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ieee80211-radiota
http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ieee80211-radiotap.c?r1=50090&r2=50089&pathrev=50090 - https://www.wireshark.org/security/wnpa-sec-2013-43.html - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8830 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50090 - http://secunia.com/advisories/54296
CVE ID: CVE-2013-4922 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8828 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50094 - http://secunia.com/advisories/54425 - http://www.wireshar
://anonsvn.wireshark.org/viewvc?view=revision&revision=50094 - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17456 - https://www.wireshark.org/security/wnpa-sec-2013-44.html - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcom-sysact.c?r1=50094&r2=50093&pathrev=50094
CVE ID: CVE-2013-4923 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:41.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (memory consumption) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8828 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50094 - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/rel
eshark.org/viewvc?view=revision&revision=50094 - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://www.wireshark.org/security/wnpa-sec-2013-44.html - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcom-sysact.c?r1=50094&r2=50093&pathrev=50094 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16731
CVE ID: CVE-2013-4924 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:41.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8828 - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - https://oval.cisecurity.or
secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17701 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcom-sysact.c?r1=50432&r2=50431&pathrev=50432 - https://www.wireshark.org/security/wnpa-sec-2013-44.html - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50432
CVE ID: CVE-2013-4925 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:41.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8828 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcom-sysact.c?r1=50478&r2=50477&pathrev=50478 - https://oval.cisecurity.org/repository/search/
nk/epan/dissectors/packet-dcom-sysact.c?r1=50478&r2=50477&pathrev=50478 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17585 - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://www.wireshark.org/security/wnpa-sec-2013-44.html - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50478