221 matches found
CVE-2007-0705
CVE-2007-0705 affects Sleipnir 2.49 and earlier and Portable Sleipnir 2.45 and earlier. The vulnerability arises from RSS data handling in Sleipnir’s RSS bar, allowing a cross-zone scripting attack that bypasses Web content zone restrictions and could cause arbitrary script execution in an inappr...
CVE-2006-0705
CVE-2006-0705 is a format-string vulnerability in SFTP/SSH logging code across multiple servers (e.g., SSH Secure Shell Server variants, and related SFTP servers). The flaw affects the handling of filenames in logs, enabling a remote authenticated user to potentially execute arbitrary commands vi...
CVE-2006-0705
Format string vulnerability in a logging function as used by various SFTP servers, including 1 AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, 2 Reflection for Secure IT Windows Server before 6.0 build 38, 3 F-Secure SSH Server for Windows before 5.3 build 35, 4 F-Secure SSH...
php security update
CentOS Errata and Security Advisory CESA-2005:0705-001 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-July/074075.html https://lists.centos.org/pipermail/centos-announce/2005-July/074076.html Affected packages: php php-bcmath php-dba php-devel...
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...
RHEL 2.1 / 3 / 4 : ethereal (RHSA-2005:306)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...
CVE-2005-0705
CVE-2005-0705 affects Ethereal 0.10.7–0.10.9 via the GPRS-LLC dissector when the ignore cipher bit option is enabled, allowing remote attackers to cause an application crash (denial of service). Red Hat advisory RHSA-2005:306 recommends upgrading Ethereal to 0.10.10 to remediate the issue.
Mandrake Linux Security Advisory : ethereal (MDKSA-2005:053)
"A number of issues were discovered in Ethereal versions prior to 0.10.10, which is provided by this update. Matevz Pustisek discovered a buffer overflow in the Etheric dissector CVE-2005-0704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Security fix for the ALT Linux 9 package wireshark version 0.10.10-alt1
March 15, 2005 Sir Raorn 0.10.10-alt1 - 0.10.10 - Fixed: + CAN-2005-0699 + CAN-2005-0704 + CAN-2005-0705 - ethereal-devel and idl2eth are unusable. Dropped - libwiretap is back...
CVE-2004-0705
Multiple cross-site scripting XSS vulnerabilities in 1 editcomponents.cgi, 2 editgroups.cgi, 3 editmilestones.cgi, 4 editproducts.cgi, 5 editusers.cgi, and 6 editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other...
CVE-2004-0705
Multiple cross-site scripting XSS vulnerabilities in 1 editcomponents.cgi, 2 editgroups.cgi, 3 editmilestones.cgi, 4 editproducts.cgi, 5 editusers.cgi, and 6 editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other...
CVE-2004-0705
Multiple cross-site scripting XSS vulnerabilities in 1 editcomponents.cgi, 2 editgroups.cgi, 3 editmilestones.cgi, 4 editproducts.cgi, 5 editusers.cgi, and 6 editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other...
CVE-2004-0705
CVE-2004-0705 affects Bugzilla 2.16.x before 2.16.6 and Bugzilla 2.18 before 2.18rc1. The issue is multiple cross-site scripting (XSS) vulnerabilities in six CGI scripts (editcomponents.cgi, editgroups.cgi, editmilestones.cgi, editproducts.cgi, editusers.cgi, editversions.cgi) that allow remote a...
CVE-2003-0705
...
CVE-2003-0705
CVE-2003-0705 corresponds to a buffer overflow in mah-jong (versions 1.5.6 and earlier) that allowed remote attackers to execute arbitrary code. Multiple connected sources (Debian DSA-378-1, OpenVAS NASL, and related advisories) document this as a remote vulnerability in the mah-jong server/clien...
CVE-2001-0705
CVE-2001-0705 describes a directory traversal vulnerability in the Arcadia Internet Store 1.0 component tradecli.dll that allows a remote attacker to read arbitrary files on the web server by supplying URLs with "dot dot" sequences in the template argument. The public records (NVD) state the affe...
CVE-2000-0705
ntop running in web mode allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0705
CVE-2000-0705 : ntop running in web mode is vulnerable to a directory-traversal attack using ".." that enables remote attackers to read arbitrary files. The described impact is partial confidentiality, with no available details on exploitation status or a confirmed fix in the provided documents. ...