CVE-2005-4704

The CVE-2005-4704 entry describes an unspecified vulnerability in BEA WebLogic Server and WebLogic Express (versions 8.1–SP3, 7.0–SP6, 6.1–SP7) where, when SSL is intended to be used, an unencrypted protocol is used in certain circumstances. This leads to user credentials being sent in the clear ...

CVE-2005-4696

CVE-2005-4696 concerns the Microsoft Wireless Zero Configuration system (WZCS). The vulnerability arises because WZCS stores WEP keys and pair‑wise Master Keys (PMKs) for the WPA pre‑shared key in plaintext in the memory of the explorer process, enabling attackers with local memory access to extr...

CVE-2005-4707

An XSS vulnerability affects PHP GEN prior to 1.3, allowing remote attackers to inject arbitrary script/HTML via unknown attack vectors. The NVD entry lists a base score of 4.3 (MEDIUM) with Network attack vector, no confidentiality impact, partial integrity impact, and no availability impact. Af...

[SECURITY] [DSA 962-1] New pdftohtml packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 962-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 961-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 961-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

CVE-2006-0492

The CVE-2006-0492 entry affects Calendarix and describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via (1) catview in cal_functions.inc.php and (2) login in cal_login.php. The catview vector may overlap CVE-2005-1865. No product versions ...

CVE-2005-4682

The CVE-2005-4682 entry describes a Cross-site Scripting (XSS) vulnerability in AudienceView, exploitable via the TSerrorMessage parameter in error.asp. The core issue is injecting arbitrary web script/HTML through user-controlled input, indicating that error handling/display path does not proper...

CVE-2005-4684

The vulnerability CVE-2005-4684 affects Konqueror and is caused by the DNS resolver handling a non-root domain in its search list, enabling a cookie to be associated with multiple domains or an attacker to steal cookies for an expanded hostname. The evidence in connected documents confirms the is...

CVE-2005-4683

PADL MigrationTools 46 is affected by CVE-2005-4683: on failure, sensitive data (e.g., /etc/shadow) may be written to world-readable temporary files such as /tmp/nis.$$ .ldif and possibly other temp files, due to improper handling by the suite of migration scripts (migrate_all_online.sh, migrate_...

CVE-2005-4683

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

CVE-2005-4683

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

CVE-2005-4678

Apple Safari 2.0.2 (416.12) is affected by CVE-2005-4678. The vulnerability allows remote attackers to spoof the status bar URL by abusing the title attribute of an image inside a link to a trusted site within a form to the malicious site. The note indicates provenance is from third-party informa...

CVE-2005-4681

CVE-2005-4681 involves the mIRC client (versions 5.91–6.16). A buffer overflow in the DCC Get Folder Dialog when entering a long string allows local users to execute arbitrary code. The vendor disputes this as a vulnerability, suggesting it may be a local bug and possibly only exploitable by the ...

CVE-2005-4689

CVE-2005-4689 concerns Six Apart Movable Type 3.16, where account names and password hashes are stored in a cookie. The underlying vulnerability is credential exposure via the cookie, enabling a remote attacker to log in to an account by sniffing that cookie. The connected documents confirm the a...

CVE-2005-4691

CVE-2005-4691 covers a local privilege issue in imake across NetBSD (before 2.0.3 and NetBSD-current before 2005-09-12) and certain X.Org/XFree86 versions. The vulnerability arises from a symlink attack on the temporary file used for the file.0 target, allowing a local user to overwrite arbitrary...

CVE-2005-4690

CVE-2005-4690 relates to Six Apart Movable Type 3.16, where local users with blog-creation privileges can create or overwrite arbitrary files (e.g., HTML and image files) by selecting an arbitrary directory as the blog’s top-level directory. Note that this issue can be exploited in conjunction wi...

CVE-2005-4679

This CVE affects Internet Explorer 6 for Windows XP SP2 . The vulnerability allows remote attackers to spoof the URL in the status bar by abusing the title attribute of an image linked to a trusted site within a form, leading to potential user deception. The description does not specify affected ...

CVE-2005-4687

PunBB 1.2.9 (used standalone or with F-ART BLOG:CMS) trusts the client IP from the X-Forwarded-For header instead of the TCP/IP stack, enabling IP address spoofing by remote attackers. Red Hat and CVE records corroborate this vulnerability in PunBB 1.2.9. The underlying issue is header-based IP e...

CVE-2005-4686

PunBB 1.2.9 (often with F-ART BLOG:CMS) includes config.php before calling unregister_globals, enabling exposure of unspecified sensitive information. Root cause: premature/configuration sequencing in the initialization flow. Impact is limited to information disclosure; no explicit vector or expl...