# CVEs published 2013-03-07 22 CVEs were published on March 7, 2013: 0 critical, 1 high. Days are UTC. - [CVE-2010-5107](https://cve.now/CVE-2010-5107.md): The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, w (CVSS 7.5) - [CVE-2013-1153](https://cve.now/CVE-2013-1153.md): Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the aut (no CVSS) - [CVE-2013-1154](https://cve.now/CVE-2013-1154.md): The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Sm (no CVSS) - [CVE-2013-2493](https://cve.now/CVE-2013-2493.md): The Hook\_Terminate function in chrome\_frame/protocol\_sink\_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explore (no CVSS) - [CVE-2013-2475](https://cve.now/CVE-2013-2475.md): The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed p (no CVSS) - [CVE-2013-2476](https://cve.now/CVE-2013-2476.md): The dissect\_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attack (no CVSS) - [CVE-2013-2477](https://cve.now/CVE-2013-2477.md): The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a den (no CVSS) - [CVE-2013-2478](https://cve.now/CVE-2013-2478.md): The dissect\_server\_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x befor (no CVSS) - [CVE-2013-2479](https://cve.now/CVE-2013-2479.md): The dissect\_mpls\_echo\_tlv\_dd\_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 a (no CVSS) - [CVE-2013-2480](https://cve.now/CVE-2013-2480.md): The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (a (no CVSS) - [CVE-2013-2481](https://cve.now/CVE-2013-2481.md): Integer signedness error in the dissect\_mount\_dirpath\_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1. (no CVSS) - [CVE-2013-2482](https://cve.now/CVE-2013-2482.md): The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite lo (no CVSS) - [CVE-2013-2483](https://cve.now/CVE-2013-2483.md): The acn\_add\_dmp\_data function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 a (no CVSS) - [CVE-2013-2484](https://cve.now/CVE-2013-2484.md): The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application (no CVSS) - [CVE-2013-2485](https://cve.now/CVE-2013-2485.md): The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite lo (no CVSS) - [CVE-2013-2486](https://cve.now/CVE-2013-2486.md): The dissect\_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in W (no CVSS) - [CVE-2013-2487](https://cve.now/CVE-2013-2487.md): epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect (no CVSS) - [CVE-2013-2488](https://cve.now/CVE-2013-2488.md): The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassem (no CVSS) - [CVE-2013-0151](https://cve.now/CVE-2013-0151.md): The do\_hvm\_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86\_32 platform does not prevent HVM\_PARAM\_NESTEDHVM (aka nested virtua (no CVSS) - [CVE-2013-0215](https://cve.now/CVE-2013-0215.md): oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which (no CVSS) - [CVE-2011-4318](https://cve.now/CVE-2011-4318.md): Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the proxy destination, does not verify that the (no CVSS) - [CVE-2012-5053](https://cve.now/CVE-2012-5053.md): Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, Ne (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-03-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.