Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : libpng vulnerabilities (USN-913-1)

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only...

Security fix for the ALT Linux 6 package libpng version 1.2.43-alt1

March 9, 2010 Dmitry V. Levin 1.2.43-alt1 - Updated to 1.2.43 fixes CVE-2010-0205...

Security fix for the ALT Linux 5 package libpng version 1.2.43-alt1

March 9, 2010 Dmitry V. Levin 1.2.43-alt1 - Updated to 1.2.43 fixes CVE-2010-0205...

CVE-2010-0205

CVE-2010-0205 concerns libpng’s png_decompress_chunk() in libpng 1.0.x (before 1.0.53), 1.2.x (before 1.2.43), and 1.4.x (before 1.4.1). The vulnerability arises from improper handling of compressed ancillary-chunk data with an excessively large uncompressed representation, enabling a crafted PNG...

HP-UX PHSS_38782 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data (HPSBMA02406 SSRT080100 rev.2)

s700800 11.X OV NNM7.53 PA-RISC Intermediate Patch 21 : Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to allow execution of arbitrary code or unauthorized access to data. %NASLMINLEVEL 70300 C...

HP-UX PHSS_38783 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data (HPSBMA02406 SSRT080100 rev.2)

s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 21 : Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to allow execution of arbitrary code or unauthorized access to data. %NASLMINLEVEL 70300 C...

Buffer overflow

Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205...

[security bulletin] HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01661610 Version: 1 HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

CVE-2008-0205

Multiple cross-site request forgery CSRF vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the 1 mcspoptmsgnoanswer or 2 mcspoptmsgwronganswer parameter to...

CVE-2008-0205

Multiple cross-site request forgery CSRF vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the 1 mcspoptmsgnoanswer or 2 mcspoptmsgwronganswer parameter to...

CVE-2008-0205

CVE-2008-0205 concerns the WordPress Math Comment Spam Protection plugin (version 2.1 and earlier). The vulnerability is a set of cross-site request forgery (CSRF) flaws in the file math-comment-spam-protection.php that let remote attackers perform administrator actions via the parameters mcsp_op...

CVE-2007-0205

CVE-2007-0205 is a directory traversal vulnerability in the admin/skins.php module of @lex Guestbook 4.0.2 and earlier. Attackers can create files in arbitrary directories by supplying . . sequences in the aj_skin and skin_edit parameters, which can enable file inclusion by placing a skin file in...

CVE-2006-0205

CVE-2006-0205 covers multiple SQL injection vulnerabilities in Wordcircle 2.17. The documented vectors include: (1) bypassing authentication and executing arbitrary SQL via the password field in the login action to index.php (involving v_login.php and s_user.php); and (2) additional, unspecified ...

Debian DSA-692-1 : kdenetwork - design flaw

The KDE team fixed a bug in kppp in 2002 which was now discovered to be exploitable by iDEFENSE. By opening a sufficiently large number of file descriptors before executing kppp which is installed setuid root a local attacker is able to take over privileged file descriptors. %NASLMINLEVEL 70300 C...

RHEL 2.1 / 3 : kdenetwork (RHSA-2005:175)

Updated kdenetwork packages that fix a file descriptor leak are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The kdenetwork packages contain a collection of networking applications for the K Desktop Environment. A bug was found in t...

CVE-2005-0205

CVE-2005-0205 affects KPPP 2.1.2 and earlier within KDE 3.1.5 and earlier. The issue is a local privilege problem where a setuid-root kppp can fail to close a privileged domain-socket file descriptor when wrappers are not used, enabling a local attacker to read/write /etc/hosts and /etc/resolv.co...

CVE-2004-0205

The CVE-2004-0205 entry corresponds to a buffer overrun in the IIS 4.0 redirect function that could allow remote code execution on affected systems. Concrete details in the connected MS04-021 bulletin indicate IIS 4.0 (Windows NT 4.0 with SP6a) is affected, while IIS 5.x/6.x are not. The vulnerab...

CVE-2004-0205

Buffer overflow in Microsoft Internet Information Server IIS 4.0 allows local users to execute arbitrary code via the redirect function...

MS04-021: IIS Redirection Vulnerability (credentialed check) (841373)

The remote host has a version of IIS 4.0 that could allow an attacker to take the control of the remote web server and execute arbitrary commands on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid13639; scriptversion"1.35";...

CVE-2003-0205

CVE-2003-0205 affects the gkrellm-newsticker plugin for gkrellm: before 0.3-3.1, it allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker URI title. The Debian advisory DSA-294-1 fixes this by upgrading to 0.3-3.1. The associated CAN-2003-0205/0206 issues de...