CVE-2005-3653

CVE-2005-3653 describes a heap-based buffer overflow in the CA iTechnology iGateway service, caused by insufficient boundary checks of the HTTP Content-Length header. An unauthenticated remote attacker can send a crafted HTTP request with a negative Content-Length to trigger a heap overflow, pote...

[SECURITY] [DSA 951-1] New trac packages fix SQL injection and cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 951-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23rd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 950-1] New CUPS packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 950-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23rd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 950-1] New CUPS packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 950-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23rd, 2006 http://www.debian.org/security/faq -...

Sql injection

Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...

Ubuntu 4.10 / 5.04 / 5.10 : mailman vulnerabilities (USN-242-1)

Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. CVE-2005-3573 Mailman did not sufficiently verify the validity of email dates. Very lar...

Ubuntu 4.10 / 5.04 / 5.10 : apache2, apache vulnerabilities (USN-241-1)

The 'modimap' module which provides support for image maps did not properly escape the 'referer' URL which rendered it vulnerable against a cross-site scripting attack. A malicious web page or HTML email could trick a user into visiting a site running the vulnerable modimap, and employ...

Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-231-1)

Rudolf Polzer reported an abuse of the 'loadkeys' command. By redefining one or more keys and tricking another user like root into logging in on a text console and typing something that involves the redefined keys, a local user could cause execution of arbitrary commands with the privileges of th...

Ubuntu 4.10 / 5.04 / 5.10 : courier vulnerability (USN-226-1)

Patrick Cheong Shu Yang discovered a flaw in the user account handling of courier-authdaemon. After successful authorization, the Courier mail server granted access to deactivated accounts. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Fedora Core 4 : httpd-2.0.54-10.3 (2006-052)

This update includes fixes for three security issues in the Apache HTTP Server. A memory leak in the worker MPM could allow remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other...

[SECURITY] [DSA 946-1] New sudo packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 946-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 946-1] New sudo packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 946-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2006 http://www.debian.org/security/faq -...

RHEL 2.1 / 3 / 4 : tetex (RHSA-2006:0160)

Updated tetex packages that fix several integer overflows are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input and creates a...

RHEL 3 : kernel (RHSA-2006:0140)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2005-4666

PHlyMail (pre-3.3 Beta1) has an XSS vulnerability allowing remote attackers to inject arbitrary JavaScript via unknown attack vectors. The CVSS v2 base score is 4.3 (Medium) with network access, no authentication, and partial integrity impact. Exploit details are not provided in the documents; no...

CVE-2005-3340

CVE-2005-3340 affects tuxpaint (tuxpaint) 0.9.14 and earlier. Multiple connected advisories describe insecure temporary file creation in tuxpaint-related scripts (notably tuxpaint-import.sh and related Debian/Ubuntu advisories). This is a local vulnerability that could enable manipulation of temp...

Cerberus FTP Server 2.32 Denial of Service

Cerberus FTP Server 2.32 Denial of Service Denial of ServiceDoS ------- KAPDA New advisory Vulnerable products : Cerberus FTP Server 2.32 Vendor: http://www.cerberusftp.com/ Risk: High Vulnerabilities: Denial of service Date : -------------------- Found : Aug 21 2005 Vendor Contacted : Aug 21 200...

USN-244-1: Linux kernel vulnerabilities

Doug Chapman discovered a flaw in the reference counting in the sysmqopen function. By calling this function in a special way, a local attacker could exploit this to cause a kernel crash. CVE-2005-3356 Karl Janmar discovered that the /proc file system module used signed data types in a wrong way....

Directory traversal

Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26PS17 and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 REP05 and 2 REP06 in the Oracle Reports Developer component. NOTE: Oracle has not disputed reliab...

CVE-2005-3659

EMC Legato NetWorker (nsrd.exe) vulnerability CVE-2005-3659 allows remote denial of service through a malformed RPC request to program number 390109, triggering a NULL dereference in the nsrd service. Affected products include NetWorker 7.1.x before 7.1.4, 7.2.x before 7.2.1.Build.314, and relate...