CVE-2005-4742

Technical details for CVE-2005-4742 are not publicly available in the provided documents; monitor for updates.

CVE-2005-4734

CVE-2005-4734 describes a stack-based buffer overflow in IISWebAgentIF.dll of the RSA Authentication Agent for Web (SecurID Web Agent) for IIS. A long url parameter in the Redirect method can allow remote attackers to execute arbitrary code. Affected are RSA SecurID Web Agent for IIS versions 5.2...

CVE-2005-4732

CVE-2005-4732 describes multiple cross-site scripting (XSS) vulnerabilities in index.php of Tux Bank/TuxRacer 0.7x and 0.8, exploitable via the (1) name and (2) description parameters. Impact is remote script/HTML injection; CVSSv2 base score 4.3 (Medium). Connected documents confirm the issue bu...

CVE-2005-4733

CVE-2005-4733 concerns NetBSD: affected are NetBSD 2.0 before 20050316 and NetBSD-current before 20050112. The issue is a local DoS caused by calling the F_CLOSEM fcntl with a parameter value of 0, which can trigger an infinite loop and system hang. The connected documents confirm the affected ve...

CVE-2005-4741

NetBSD is affected: versions 1.6, 2.0–2.1, and NetBSD-current before 20051031. The issue is a local privilege escalation: a debugger can attach to a setuid/setgid (P_SUGID) process that performs an exec without resetting real credentials. Root cause: lack of credential reset on exec for P_SUGID p...

CVE-2005-4735

IBM DB2 Universal Database (UDB) 8.1 Release 810 before 8.1 FP10 is affected by a DoS vulnerability reported as CVE-2005-4735. The issue allows remote authenticated users to crash the application via two input-based vectors: (1) certain equality predicates that trigger self-removal (IY70808) and ...

CVE-2005-4737

CVE-2005-4737 affects IBM DB2 Universal Database (UDB) 8.2 before ESE AIX 5765F4100. The issue allows remote authenticated users to cause a denial of service (CPU consumption) by abnormally terminating a connection, which prevents db2agents from being properly cleared. Documentation consistently ...

CVE-2006-1268

The CVE-2006-1268 entry concerns the Internet Key Exchange (IKE) implementation in Funkwerk X2300 7.2.1, where remote attackers can cause a denial of service and possibly execute arbitrary code using crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite. The advisory notes ambiguit...

DSA-1008-1 kpdf - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1004-1] New vlc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1004-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...

RHEL 3 : squid (RHSA-2006:0045)

Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HT...

RHEL 3 : initscripts (RHSA-2006:0015)

Updated initscripts packages that fix a privilege escalation issue and several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The initscripts package contains the basic system scripts used to boot your Red Hat system,...

RHEL 3 : vixie-cron (RHSA-2006:0117)

An updated vixie-cron package that fixes a bug and security issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified program...

vixie security update

CentOS Errata and Security Advisory CESA-2006:0117 An updated vixie-cron package that fixes a bug and security issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is...

squid security update

CentOS Errata and Security Advisory CESA-2006:0045 Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching...

initscripts security update

CentOS Errata and Security Advisory CESA-2006:0015 Updated initscripts packages that fix a privilege escalation issue and several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The initscripts package contains the basic...