RHEL 2.1 : XFree86 (RHSA-2005:329)

Updated XFree86 packages that fix several integer overflows are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the...

RHEL 2.1 / 3 / 4 : mozilla (RHSA-2005:769)

An updated mozilla package that fixes a security bug is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug was found...

CVE-2005-2782

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

CVE-2005-2782

CVE-2005-2782 affects AutoLinks Pro 2.1 (AutoLinks Pro) via the PHP script al_initialize.php. The vulnerability is a remote file inclusion in the alpath parameter that accepts ftp:// URLs, bypassing a blacklist that only checked for http(s). This allows an attacker to cause arbitrary PHP code exe...

CVE-2005-2782

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

RHEL 2.1 : elm (RHSA-2005:755)

An updated elm package is now available that fixes a buffer overflow issue for Red Hat Enterprise Linux 2.1 AS and AW. This update has been rated as having critical security impact by the Red Hat Security Response Team. Elm is a terminal mode email client. A buffer overflow flaw in Elm was...

RHEL 2.1 : slocate (RHSA-2005:747)

An updated slocate package that fixes a denial of service issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a nightly-updated central...

RHEL 2.1 : gaim (RHSA-2005:589)

An updated gaim package that fixes a buffer overflow security issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Instant Messaging client. A heap based buffer overflow issue was discovered in the way Gai...

RHEL 2.1 : ucd-snmp (RHSA-2005:720)

Updated ucd-snmp packages that a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of servic...

RHEL 2.1 : dhcpcd (RHSA-2005:603)

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

CVE-2004-2267

The CVE-2004-2267 entry describes a Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier. The issue allows remote attackers to inject arbitrary HTML or web script via the album name. Affected product/versions: Ansel 2.1 and earlier. Root cause: unsanitized album name input enabling s...

CVE-2004-2266

CVE-2004-2266 affects Ansel 2.1 and earlier. The issue is a SQL injection vulnerability that allows remote attackers to modify SQL statements via the image parameter. According to the provided data, the NVD CVSS v2.0 base score is 7.5 (HIGH) with network attack vector, low attack complexity, no a...

CVE-2004-2267

Cross-site scripting XSS vulnerability in Ansel 2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via the album name...

CVE-2004-2266

SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter...

CVE-2001-1561

Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long 1 -name and 2 -T arguments...

CVE-2001-1561

CVE-2001-1561 describes a buffer overflow in Xvt 2.1 on Debian Linux 2.2 that allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. The issue stems from argument handling in xvt, enabling code execution with elevated privileges because xvt is installed setuid root....

CVE-2002-1991

The CVE-2002-1991 entry describes a PHP file inclusion vulnerability in osCommerce 2.1, exploitable via the include_file parameter to include_once.php to execute arbitrary commands. Affected component: include_once.php in osCommerce 2.1. Impact is indicated as partial confidentiality/integrity/av...

CVE-2002-1991

PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the includefile parameter to includeonce.php...

CVE-2005-2219

Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action...

CVE-2005-2219

Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action...