CVE-2005-1924

The CVE-2005-1924 issue affects the G/PGP plugin for SquirrelMail (2.1 and earlier). It allows an authenticated remote user to execute arbitrary commands by injecting shell metacharacters in the fpr parameter to deleteKey (via gpg_keyring.php called by import_key_file.php, import_key_text.php, an...

RSA Authentication Agent for Web for IIS chunked encoding overflow

Added: 07/13/2007 CVE: CVE-2005-1471 BID: 13524 OSVDB: 16164 Background RSA Authentication Agent For Web for IIS provides access control for applications on IIS web servers. Problem A heap overflow vulnerability when using chunked transfer-encoding allows remote attackers to execute arbitrary...

RSA Authentication Agent for Web for IIS chunked encoding overflow

Added: 07/13/2007 CVE: CVE-2005-1471 BID: 13524 OSVDB: 16164 Background RSA Authentication Agent For Web for IIS provides access control for applications on IIS web servers. Problem A heap overflow vulnerability when using chunked transfer-encoding allows remote attackers to execute arbitrary...

RSA Authentication Agent for Web for IIS chunked encoding overflow

Added: 07/13/2007 CVE: CVE-2005-1471 BID: 13524 OSVDB: 16164 Background RSA Authentication Agent For Web for IIS provides access control for applications on IIS web servers. Problem A heap overflow vulnerability when using chunked transfer-encoding allows remote attackers to execute arbitrary...

iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_recv_key() Command Injection Vulnerability

SquirrelMail G/PGP Plugin gpgrecvkey Command Injection Vulnerability iDefense Security Advisory 07.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 11, 2007 I. BACKGROUND The SquirrelMail G/PGP Encrpytion Plugin is a general purpose encryption, decryption, and digital signature...

iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin deleteKey() Command Injection Vulnerability

SquirrelMail G/PGP Plugin deleteKey Command Injection Vulnerability iDefense Security Advisory 07.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 11, 2007 I. BACKGROUND The SquirrelMail G/PGP Encrpytion Plugin is a general purpose encryption, decryption, and digital signature...

Low: Red Hat Bug Fix Advisory: unzip bug fix update

Updated unzip packages that address various bugs are now available. The unzip utility is used to list, test, or extract files from a zip archive. This update addresses the following issues: a TOCTOU bug that could be exploited to change file permissions CVE-2005-2475 a long filename buffer overfl...

MS07-041: Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution (939373)

The remote host has a version of IIS that is vulnerable to a remote flaw that could allow an attacker to take the control of the remote web server and execute arbitrary commands on the remote host with the SYSTEM privileges. Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2005-4856

The CVE affects eZ publish: admin interface vulnerabilities in versions 3.5 up to 3.5.7, 3.6 up to 3.6.5, 3.7 up to 3.7.3, and 3.8 before 20051110. The issue arises from improper handling of authorization errors, allowing remote attackers to obtain sensitive information and view the admin page la...

CVE-2005-4853

CVE-2005-4853 affects the forum package in eZ publish. In default configurations, edit permissions are not restricted to the posting’s owner, allowing remote authenticated users to edit arbitrary postings. Affected versions are: eZ publish 3.5 before 3.5.5; 3.6 before 3.6.2; 3.7 before 3.7.0rc2; ...

CVE-2005-4857

CVE-2005-4857 affects eZ publish multiple versions (3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128). The vulnerability allows remote authenticated users to cause a denial of service by sending a request to content/advancedsearch.php with an empty SearchContentClassI...

CVE-2005-4858

CVE-2005-4858 describes multiple XSS vulnerabilities in the script mimic2.cgi of the Mimic2/Mimicboard2 package (version 086 and earlier). The issue enables remote attackers to inject arbitrary web script or HTML through unspecified parameters tied to the (1) name, (2) title, and (3) comment fiel...

CVE-2005-4850

CVE-2005-4850 affects eZ Publish 3.5–3.7 before 20050608. The issue occurs because submitting data requires both edit and create permissions; this allows remote attackers to edit data submitted by arbitrary anonymous users. The available connected documents confirm the product/version scope and t...

CVE-2005-4859

CVE-2005-4859 affects mimicboard2 (Mimic2) 086 and earlier. The flaw is that sensitive information is stored under the web root with insufficient access control, allowing remote attackers to download a database via a direct request for mimic2.dat. The available connected documents confirm the aff...

CVE-2005-4852

The CVE describes a vulnerability in eZ Publish core (siteaccess URIMatching) affecting versions 3.5–3.8 prior to 20050812, where all non-alphanumeric URI characters are replaced with underscores. This allows remote attackers to bypass access restrictions by crafting URIs such as /admin:de, which...

CVE-2005-4854

CVE-2005-4854 affects eZ publish versions 3.5–3.7 prior to 2005-08-30. The root cause is that a folder’s read permissions are not used to restrict notifications, allowing remote authenticated users to view sensitive information about changes to content in arbitrary folders. The connected sources ...

CVE-2005-4851

CVE-2005-4851 affects eZ publish versions 3.4.4–3.7 prior to 2005-07-22. The issue arises from permissions handling at the node level, which allows remote authenticated users to bypass original permissions on embedded objects in XML fields and read those objects. Documented impact is reading of e...

CVE-2005-4849

Apache Derby vulnerability CVE-2005-4849 affects Derby prior to 10.1.2.1. The issue exposes the (1) user and (2) password attributes in cleartext via the RDBNAM parameter of the ACCSEC command and via the output of DatabaseMetaData.getURL, enabling context-dependent attackers to obtain sensitive ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 show, 3 searchtype, 4 catid, and 5 searchtxt parameters, a different version and vectors than CVE-2005-4060...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...