CVE-2005-4769

CVE-2005-4769: Affected software is Belchior Foundry vCard PRO 3.1; vulnerability resides in addrbook.php where SQL injection via the addr_id parameter allows remote execution of arbitrary SQL commands. The core issue is improper input handling leading to database query manipulation. No explicit ...

CVE-2005-4772

The CVE-2005-4772 entry concerns liby2util in YaST on SUSE Linux prior to 20051007. The description states that liby2util preserves permissions and ownerships when copying a remote repository, which could allow local users to read or modify sensitive files. The connected SUSE CVE-2005-4772 page c...

CVE-2005-4771

The CVE-2005-4771 entry concerns the Trust Digital Trusted Mobility Suite’s Trusted Mobility Agent PC Policy. A cancel button at the domain-authentication prompt bypasses policy checks, allowing local users to sync a handheld (PDA) device despite a policy setting that sync is unauthorized. The av...

CVE-2005-4770

CVE-2005-4770 describes a SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product (possibly Accelerated E Solutions). The vulnerability allows remote attackers to execute arbitrary SQL commands via the password parameter. The provided data includes a CVSS v2 base sc...

CVE-2005-4768

CVE-2005-4768 describes an SQL injection in manage_account.php of Tux Racer TuxBank 0.7x and 0.8. The vulnerability is exploitable via the id parameter in a manageaccount action to index.php, potentially allowing remote attackers to execute arbitrary SQL commands. Public references list multiple ...

Security fix for the ALT Linux 9 package openvpn version 2.0.6-alt1

April 6, 2006 Nikolay A. Fetisov 2.0.6-alt1 - New version 2.0.6 -- Security fixes for CVE-2005-3393, CVE-2005-3409, CVE-2006-1629 -- several minor bug fixes and improvements, see ChangeLog for details - Adding README.ALT - Updating init.d script - Building and packaging plugins...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...

[SECURITY] [DSA 1018-2] New Linux kernel 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-2 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman April 5th, 2006 http://www.debian.org/security/faq -...

freeradius security update

CentOS Errata and Security Advisory CESA-2006:0271 Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free...

Moderate: Red Hat Security Advisory: openmotif security update

Updated openmotif packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. A number of buffer overfl...

Important: Red Hat Security Advisory: freeradius security update

Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...

RHEL 4 : openmotif (RHSA-2006:0272)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0272 advisory. - openmotif libUil buffer overflows CVE-2005-3964 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 3 / 4 : freeradius (RHSA-2006:0271)

Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...

CVE-2005-4753

CVE-2005-4753 affects BEA WebLogic Server and WebLogic Express: 8.1 SP4 and earlier, and 7.0 SP6 and earlier. The issue is the reporting of incorrect severity levels for an audit event in certain “heavy usage” scenarios, which might allow attackers to perform unauthorized actions and avoid detect...

CVE-2005-4766

CVE-2005-4766 affects BEA WebLogic Server and WebLogic Express; versions 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic. The root cause is lack of encryption for multicast communications, which could allow an attacker to read sensitive cluster synchronization messa...

CVE-2005-4755

The CVE-2005-4755 issue affects BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, where the SSL private key passphrase (CustomTrustKeyStorePassPhrase) is stored in cleartext in nodemanager.config, or rendered in cleartext during domain creation via the Configuration Wizard, visible on...

CVE-2005-4765

BEA WebLogic Server/Express 8.1 SP4 and earlier and 7.0 SP6 and earlier are affected. When using weblogic.Deployer with the t3 protocol, it does not automatically fall back to the secure t3s protocol even if an Administration port is enabled on the Admin server, which may allow remote attackers t...

CVE-2005-4757

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, are affected by an issue where the servlet root URL pattern (/) is not properly constrained, potentially allowing remote attackers to bypass intended protections. The vulnerability is described across multiple ...