[SECURITY] [DSA 1021-1] New netpbm-free packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1021-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...

CVE-2005-4747

Cross-site scripting XSS vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors involving the default page...

CVE-2005-4744

Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single...

CVE-2005-4746

Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of service crash via 1 the rlmsqlcounter module or 2 unknown vectors "while expanding %t"...

CVE-2005-4745

CVE-2005-4745 is a SQL injection vulnerability in the rlm_sqlcounter module of FreeRADIUS 1.0.3 and 1.0.4. The issue permits remote attackers to execute arbitrary SQL commands via unknown attack vectors. Documentation in multiple advisories (e.g., Debian DSA-1145-1) corroborates the SQL injection...

CVE-2005-4744

FreeRADIUS contains an off-by-one error in sql_error (sql_unixodbc.c) affecting at least 1.0.2-4 and 1.0.2.5-5, with later versions also referenced. CVE-2005-4744 may allow remote attackers to cause denial of service (crash) and possibly execute arbitrary code by forcing a failing external databa...

CVE-2005-4746

CVE-2005-4746 pertains to FreeRADIUS 1.0.3 and 1.0.4, where multiple buffer overflows in the server (notably in the rlm_sqlcounter module and other vectors described as those occurring while expanding %t) can cause denial of service. The connected advisories from Debian (DSA-1145-1) and vendor di...

CVE-2005-4747

CVE-2005-4747 describes a Cross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6. The issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors involving the default page. Affected software: WebHost Automation Ltd Helm versions prior to...

[ GLSA 200603-25 ] OpenOffice.org: Heap overflow in included libcurl

Gentoo Linux Security Advisory GLSA 200603-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Land Down Under <= 801 Multiple Vulnerabilities

Land Down Under is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Edgewall Software Trac SQL injection flaw

The remote web server contains a CGI script that is affected by a SQL injection flaw. Description: The remote host is running Trac, an enhanced wiki and issue tracking system for software development projects written in python. The remote version of this software is prone to a SQL injection flaw...

MS Windows ASN.1 Remote Exploit (MS04-007)

Exploit for unknown platform in category remote exploits ========================================== MS Windows ASN.1 Remote Exploit MS04-007 ========================================== Microsoft ASN.1 remote exploit for CVE-2005-1935 http://www.inj3ct0r.com/sploits/8385.tar.gz 0day.today 2018-03-3...

Community Link Pro webeditor login.cgi remote command execution

The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software contains a flaw in the script 'login.cgi' which may allow an attacker to execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id:...

W-Agora 'site' Parameter Directory Traversal Vulnerability

W-Agora is prone to directory traversal attacks. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:w-agora:w-agora"; ifdescriptio...

Edgewall Software Trac SQL injection flaw

The remote version of Trac is prone to a SQL injection flaw through the ticket query module due to SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The Includer RCE Vulnerability

The Includer is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP-Fusion < 6.00.110 Multiple SQLi Vulnerabilities

PHP-Fusion is prone to multiple SQL injection SQLi vulnerabilities due to its failure to properly sanitize certain parameters. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability

The version of SugarCRM installed on the remote host does not properly sanitize user input in the SPDX-FileCopyrightText: 2005 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MailEnable <= 1.7 IMAP Rename DoS Vulnerability

MailEnable is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpDocumentor <= 1.3.0 RC4 LFI/RFI Vulnerability - Active Check

phpDocumentor is prone to local and remote file inclusion LFI/RFI vulnerabilities. SPDX-FileCopyrightText: 2006 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...