CVE-2005-4641

CVE-2005-4641 describes an SQL injection in the home.php file of eazyCMS 2.0, exploitable via the page_id parameter. Remote attackers could execute arbitrary SQL commands. The provided documents confirm the affected product/version and the nature of the vulnerability but do not specify a vendor-s...

CVE-2005-4640

The CVE-2005-4640 entry describes a SQL injection vulnerability in index.php of class-1 Poll Software 0.4 and earlier. The underlying issue is that input parameters (pollid and previouspoll) can be crafted to alter SQL commands executed by the application. This enables remote attackers to potenti...

[SECURITY] [DSA 934-1] New pound packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 934-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 9, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 933-1] New hylafax packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 933-1 [email protected] http://www.debian.org/security/ Michael Stone January 9, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 933-1] New hylafax packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 933-1 [email protected] http://www.debian.org/security/ Michael Stone January 9, 2006 http://www.debian.org/security/faq -...

HylaFAX hfaxd with PAM Password Policy Bypass

The remote host is running HylaFAX, a fax / pager server application for Linux / unix. The version of HylaFAX installed on the remote host does not check passwords when authenticating users via hfaxd, its fax server. An attacker can exploit this issue to bypass authentication using a valid userna...

WinProxy < 6.1a Multiple Vulnerabilities (credentialed check)

The remote host is running WinProxy, a proxy server for Windows. According to the Windows registry, the installed version of WinProxy suffers from denial of service and buffer overflow vulnerabilities in its telnet and web proxy servers. An attacker may be able to exploit these issues to crash th...

Code injection

sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158...

CVE-2005-2344

The vulnerability CVE-2005-2344 affects Research in Motion’s BlackBerry Attachment Service (BES) for BES installations on Windows, where a malformed PNG file can trigger a heap-based buffer overflow. This can cause the Attachment Service to stop responding or crash, and may allow arbitrary code e...

CVE-2005-4638

The CVE-2005-4638 entry involves Kayako SupportSuite 3.00.26 and earlier where the index.php in multiple modules (news, downloads, knowledgebase) can reveal the full server path via specific parameters: _a, newsid, downloaditemid, kbarticleid. This is a path disclosure vulnerability in the affect...

CVE-2005-4636

OpenOffice.org 2.0 and earlier is affected. When hyperlinks are disabled, the Hyperlink dialog’s WWW-browser button can be clicked, potentially bypassing intended security settings and enabling user trickery. This CVE is documented across multiple sources (Red Hat, SUSE, Mandrake/Mandriva, Ubuntu...

CVE-2006-0151

sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158...

CVE-2005-4637

Kayako SupportSuite 3.00.26 and earlier (index.php) contains multiple XSS flaws. Exploitable via (1) nav parameter in downloads module, (2) Full Name and (3) Email in core, (4) Full Name, (5) Email, and (6) Subject in tickets, and (7) Registered Email in lostpassword feature. Impact per sources: ...

CVE-2005-4351

CVE-2005-4351 – Summary (concrete details from connected docs): The vulnerability affects BSD Securelevels implementations in FreeBSD (up to 6.0-STABLE and 7.0-CURRENT), OpenBSD (up to 3.8), DragonFly (up to 1.2), and Linux (up to 2.6.15). The root cause is that, while securelevels protect files ...

CVE-2005-4352

The CVE-2005-4352 entry documents a time-wrap flaw in BSD securelevels affecting NetBSD 2.1 and earlier and Linux 2.6.15 and earlier. The root cause is an integer overflow in securelevels that allows a local user to bypass time-change restrictions by setting the clock forward to the 32‑bit Unix e...

CVE-2005-4592

CVE-2005-4592 affects bogofilter and bogolexer 0.96.2. The root cause is a heap-based buffer overflow in the input handling where words longer than flex’s input buffer (16,384 bytes) can overflow, enabling a remote attacker to cause a crash and possibly execute arbitrary code. Documented impact: ...

CVE-2005-3540

CVE-2005-3540 affects petris prior to version 1.0.1. Debian security advisories (DSA-929-1, DSA-929-1) describe a buffer overflow that may allow remote code execution with group games privileges, fixed in Petris 1.0.1-4sarge0 and released updates for stable/unstable suites. OSV and Debian tracker...

[SECURITY] [DSA 932-1] New kpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 932-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 932-1] New kpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 932-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 931-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 931-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2006 http://www.debian.org/security/faq -...