10527 matches found
CVE-2005-2934
CVE-2005-2934 describes a local privilege-escalation in SCO UnixWare 7.1.3 and 7.1.4 caused by a failure in the ptrace implementation to validate setuid permissions on traced binaries. This allows a local user to gain root privileges by attaching to a process via ptrace (exploitation described as...
CVE-2005-3630
Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives...
ZDI-06-002: Adobe Macromedia ShockWave Code Execution
ZDI-06-002: Adobe Macromedia ShockWave Code Execution http://www.zerodayinitiative.com/advisories/ZDI-06-002.html February 23, 2006 -- CVE ID: CVE-2005-3525 -- Affected Vendor: Adobe Macromedia -- Affected Products: Macromedia Shockwave Installer -- TippingPointTM IPS Customer Protection:...
CVE-2005-3525
CVE-2005-3525 corresponds to a stack-based buffer overflow in the Shockwave Player ActiveX installer (ActiveX control used to install Shockwave). The flaw exists in the installer ActiveX control and can be exploited by supplying crafted large values to two parameters, enabling remote code executi...
CVE-2005-4727
Cross-site scripting XSS vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field...
CVE-2005-4727
The CVE-2005-4727 entry describes a Cross-site scripting (XSS) vulnerability in gbook.cgi of gBook prior to 1.0.2, allowing remote attackers to inject arbitrary script/HTML via the User-Agent HTTP header. Affected component: gBook, specifically the gbook.cgi script. Underlying cause (root cause) ...
MDKSA-2006:045 : MySQL
Eric Romang discovered a temporary file vulnerability in the mysqlinstalldb script provided with MySQL. This vulnerability only affects versions of MySQL 4.1.x prior to 4.1.12. The updated packages have been patched to address this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
WMF and EMF Files (CVE-2005-2123; CVE-2005-2124; CVE-2005-4560; CVE-2006-0020)
...
RHEL 2.1 / 3 : tar (RHSA-2006:0195)
An updated tar package that fixes a path traversal flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that...
tar security update
CentOS Errata and Security Advisory CESA-2006:0195 An updated tar package that fixes a path traversal flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore...
CVE-2005-4726
The CVE-2005-4726 entry concerns MUTE 0.4, which uses improper flood protection algorithms. The Red Hat entry reiterates that remote attackers can obtain sensitive information (privacy leak and search result data) by manipulating a drop chain neighbor near the end of a message chain. The document...
Fedora Directory Server Crafted IFRAME adm.conf Admin Server Password Disclosure
The remote host appears to be running Fedora Directory Server, a directory server implementation for Fedora Core. The Administration Server, which is used to manage Fedora DS, allows an unauthenticated attacker to retrieve the admin password hash through a simple GET request. %NASLMINLEVEL 70300 ...
Lotus Notes Attachment Viewer UUE file buffer overflow
Added: 02/21/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23065 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the attachment viewer in the Lotus Notes e-mail client allows command execution when a user opens a specially crafted UUE file. Resolution Upgra...
Lotus Notes Attachment Viewer UUE file buffer overflow
Added: 02/21/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23065 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the attachment viewer in the Lotus Notes e-mail client allows command execution when a user opens a specially crafted UUE file. Resolution Upgra...
Lotus Notes Attachment Viewer UUE file buffer overflow
Added: 02/21/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23065 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the attachment viewer in the Lotus Notes e-mail client allows command execution when a user opens a specially crafted UUE file. Resolution Upgra...
CVE-2005-4725
This entry concerns Geeklog prior to version 1.3.11sr3. The vulnerability allows remote attackers to bypass intended access controls and post a comment on an arbitrary story or topic by guessing the story ID. Evidence from connected sources confirms the affected software is Geeklog and the proble...
CVE-2005-4724
PhpTagCool 1.0.3 contains an SQL injection in post.php, exploitable via the X-Forwarded-For HTTP header, allowing remote SQL command execution. The vulnerability’s impact is described as partial confidentiality, integrity, and availability loss. No explicit exploit code or in-the-wild details are...
CVE-2005-1919
CVE-2005-1919 is rejected/not used; it does not represent an active vulnerability entry.
Lotus Notes HTML Speed Reader URL buffer overflow
Added: 02/17/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23068 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the HTML Speed Reader component of the Lotus Notes e-mail client allows command execution by a specially crafted e-mail message containing a lon...