# CVEs published 2013-03-07

22 CVEs were published on March 7, 2013: 0 critical, 1 high. Days are UTC.

- [CVE-2010-5107](https://cve.now/CVE-2010-5107.md): The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login… (CVSS 7.5)
- [CVE-2013-1153](https://cve.now/CVE-2013-1153.md): Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the… (no CVSS)
- [CVE-2013-1154](https://cve.now/CVE-2013-1154.md): The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and… (no CVSS)
- [CVE-2013-2493](https://cve.now/CVE-2013-2493.md): The Hook\_Terminate function in chrome\_frame/protocol\_sink\_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet… (no CVSS)
- [CVE-2013-2475](https://cve.now/CVE-2013-2475.md): The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed… (no CVSS)
- [CVE-2013-2476](https://cve.now/CVE-2013-2476.md): The dissect\_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote… (no CVSS)
- [CVE-2013-2477](https://cve.now/CVE-2013-2477.md): The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a… (no CVSS)
- [CVE-2013-2478](https://cve.now/CVE-2013-2478.md): The dissect\_server\_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x… (no CVSS)
- [CVE-2013-2479](https://cve.now/CVE-2013-2479.md): The dissect\_mpls\_echo\_tlv\_dd\_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6… (no CVSS)
- [CVE-2013-2480](https://cve.now/CVE-2013-2480.md): The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service… (no CVSS)
- [CVE-2013-2481](https://cve.now/CVE-2013-2481.md): Integer signedness error in the dissect\_mount\_dirpath\_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark… (no CVSS)
- [CVE-2013-2482](https://cve.now/CVE-2013-2482.md): The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite… (no CVSS)
- [CVE-2013-2483](https://cve.now/CVE-2013-2483.md): The acn\_add\_dmp\_data function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6… (no CVSS)
- [CVE-2013-2484](https://cve.now/CVE-2013-2484.md): The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2013-2485](https://cve.now/CVE-2013-2485.md): The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite… (no CVSS)
- [CVE-2013-2486](https://cve.now/CVE-2013-2486.md): The dissect\_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in… (no CVSS)
- [CVE-2013-2487](https://cve.now/CVE-2013-2487.md): epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses… (no CVSS)
- [CVE-2013-2488](https://cve.now/CVE-2013-2488.md): The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the… (no CVSS)
- [CVE-2013-0151](https://cve.now/CVE-2013-0151.md): The do\_hvm\_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86\_32 platform does not prevent HVM\_PARAM\_NESTEDHVM (aka nested… (no CVSS)
- [CVE-2013-0215](https://cve.now/CVE-2013-0215.md): oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations… (no CVSS)
- [CVE-2011-4318](https://cve.now/CVE-2011-4318.md): Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the proxy destination, does not verify that… (no CVSS)
- [CVE-2012-5053](https://cve.now/CVE-2012-5053.md): Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-03-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.