CVE-2005-4797

CVE-2005-4797: A directory-traversal vulnerability in the Solaris printd (lp) daemon (lpd) affects Solaris 7–10. It allows remote deletion of arbitrary files via ".." in an Unlink data file command, with the lpd process typically running as root. Public references include Metasploit exposure (Sol...

CVE-2005-4795

CVE-2005-4795 relates to a local privilege escalation in Solaris 7/8 due to a BCP libmle buffer overflow in the multi-language environment library (libmle), observed with the Japanese locale. Publicly documented remediation centers on Sun/Solaris patch updates: Solaris 7 (SPARC) patch 111646-01 a...

CVE-2005-4796

CVE-2005-4796 relates to an unspecified vulnerability in the XView library (libxview.so) on Solaris 2.5 through 10. The issue is a local privilege scenario where a local user could corrupt files via unknown vectors tied to the handling of the clipboard selection during exit of an XView applicatio...

[SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1051-1 [email protected] http://www.debian.org/security/ Martin Schulze May 4th, 2006 http://www.debian.org/security/faq -...

DSA-1051-1 mozilla-thunderbird - several vulnerabilities

Bulletin has no description...

CVE-2005-4794

The CVE-2005-4794 issue affects Cisco devices listed in the Initial document: IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM). The vulnerability is a denial of service caused by processing a compressed DNS packet containing a label length by...

CVE-2006-2125

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3779. Reason: This candidate is a duplicate of CVE-2005-3779. Notes: All CVE users should reference CVE-2005-3779 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-2125

CVE-2006-2125 is a duplicate of CVE-2005-3779; connected sources describe an unspecified local privilege escalation in HP-UX xterm across HP-UX 11.00, 11.11, and 11.23. The vulnerability could allow a local user to gain unauthorized access. Affected patch lineage from HP (PHSS_34102/PHSS_34159/PH...

[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1048-1 [email protected] http://www.debian.org/security/ Martin Schulze May 1st, 2006 http://www.debian.org/security/faq -...

Internet Explorer Multiple Protections (CVE-2005-2831; CVE-2006-0003)

...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

CVE-2006-2088

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

CVE-2005-4792

SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2005-4793

Technical details (affected products/versions, root cause, impact, and fixes) are not publicly provided in the provided documents. Monitor for updates.

CVE-2005-4792

CVE-2005-4792 is a SQL injection in phpWebSite’s index.php (versions

CVE-2005-2315

CVE-2005-2315 affects the FreeBSD/dnrd (Domain Name Relay Daemon) prior to version 2.19.1. The common vulnerability across sources is a remote buffer overflow (and related stack overflow) triggered by processing large DNS packets with the Z and QR flags cleared, which can allow an attacker to exe...

CVE-2005-2316

CVE-2005-2316 affects Domain Name Relay Daemon (DNRD) prior to version 2.19.1. The vulnerability arises from a DNS packet using message compression in the QNAME with two pointers that reference each other (circular buffer), allowing remote attackers to trigger infinite recursion and cause a denia...

CVE-2005-0037

The CVE-2005-0037 entry documents a DoS in the DNS implementation of DNRD prior to version 2.10. A remote attacker can trigger an infinite loop by sending a compressed DNS packet with a label-length byte offset error, potentially impacting availability. Multiple sources (NVD, SUSE CVE page, CVE l...

CVE-2005-0036

CVE-2005-0036 affects DeleGate 8.10.2 and earlier. The DNS message decompression mishandles a compressed DNS packet with a label length offset, which could trigger an infinite loop and remote DoS. This is documented in NVD/SUSE/JVN entries; exploitation status and specific remediation/patch detai...

CVE-2005-0038

Summary (CVE-2005-0038): The DNS implementation in PowerDNS 2.9.16 and earlier is vulnerable to remote denial of service via a compressed DNS packet with a label length byte offset error that can trigger an infinite loop. This is corroborated by multiple sources in the connected documents (NVD, S...