CVE-2005-4605

CVE-2005-4605 concerns the Linux kernel procfs implementation. A signedness error in the proc_misc.c code (pre-2.6.15) allows a local attacker to read sensitive kernel memory by manipulating a signed value added to an unsigned value, disclosed via /proc interactions. Public reports document the a...

CVE-2005-2341

CVE-2005-2341 describes a heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service that can be triggered by viewing a crafted TIFF attachment in an e‑mail, enabling a remote attacker to cause a denial of service (hang). Affected component: BlackBerry Attachment Service...

CVE-2005-2342

Research in Motion RIM BlackBerry Router allows remote attackers to cause a denial of service communication disruption via crafted Server Routing Protocol SRP packets...

CVE-2005-4602

SQL injection vulnerability in inc/functionupload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment...

CVE-2005-2342

The CVE-2005-2342 issue affects the Research In Motion (RIM) BlackBerry Router within BlackBerry Enterprise Server (BES). A remote, unauthenticated attacker can cause a denial-of-service (communication disruption) by sending crafted Server Routing Protocol (SRP) packets to the router, potentially...

CVE-2005-4603

The CVE-2005-4603 entry describes a Cross-site scripting (XSS) vulnerability in printthread.php of MyBB versions 1.0.1 and earlier. The issue arises because thread messages are not properly sanitized in the print view, allowing remote attackers to inject arbitrary web script or HTML via the threa...

CVE-2005-4602

CVE-2005-4602 relates to MyBB before 1.0.1, where an SQL injection vulnerability exists in inc/functions_upload.php that can be exploited via the file extension of an uploaded attachment to execute arbitrary SQL. Evidence in connected records confirms this issue and links it to later notes that M...

CVE-2005-4604

This CVE (CVE-2005-4604) concerns a buffer overflow in MTink within the printer-filters-utils package, exploitable via an overly long HOME environment variable. Affected component: mtink binary used by printer-filters-utils. Root cause: buffer overflow leading to arbitrary code execution by local...

CVE-2005-4603

Cross-site scripting XSS vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread...

CVE-2005-2343

The CVE-2005-2343 issue affects the Research in Motion (RIM) BlackBerry Handheld web browser prior to 4.0.2. A denial of service can be triggered remotely by a specially crafted Java Application Description (JAD) file with an extremely long application name and vendor string, causing the browser ...

Xaraya index.php module Parameter Traversal Arbitrary File/Directory Manipulation

The version of Xaraya installed on the remote host does not sanitize input to the 'module' parameter of the 'index.php' script before using it to write to files on the affected host. Using a specially crafted request, an unauthenticated attacker can create directories and possibly overwrite...

CVE-2005-4595

CVE-2005-4595 describes an untrusted search path (RPATH/DT_RPATH) vulnerability in XnView 1.70 and NView 4.51 on Gentoo Linux. The dynamic loader could search in untrusted directories for shared libraries, enabling a local attacker to execute arbitrary code with the privileges of the user running...

CVE-2005-4594

Stack-based buffer overflow in TUGZip 3.4.0.0 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive...

CVE-2005-4601

CVE-2005-4601 affects ImageMagick and was addressed by a Red Hat security advisory RHSA-2006:0178. The vulnerability arises from delegate code in ImageMagick 6.2.4.5-0.3 that allows remote attackers to execute arbitrary commands via shell metacharacters in a filename processed by the display comm...

CVE-2005-4596

The CVE-2005-4596 entry describes a cross-site scripting (XSS) vulnerability in AdesGuestbook 2.0, specifically in read.php where the totalRows_rsRead parameter can be exploited to inject arbitrary web script or HTML. Affected component: AdesGuestbook 2.0 (read.php). Root cause: improper sanitiza...

CVE-2005-4597

CVE-2005-4597: XSS in iPei Guestbook 1.7 (index.php) allowing remote attackers to inject arbitrary script/HTML via the email parameter when signing the guestbook. Root cause is reflected/scriptable output in the email field; affects iPei Guestbook 1.7. No remediation details provided in the suppl...

CVE-2005-4594

The CVE-2005-4594 entry concerns Stack-based buffer overflow in TUGZip 3.4.0.0, exploitable by processing an ARJ archive with a long filename. The underlying issue is a buffer overflow in filename handling, which could allow remote code execution. Affected product: TUGZip 3.4.0.0. Root cause: ins...

CVE-2005-4600

CVE-2005-4600 describes a directory traversal vulnerability in TinyMCE Compressor PHP prior to 1.06. An attacker can cause the PHP script tiny_mce_gzip.php to read or include arbitrary files by supplying a trailing null byte (%00) in one of four parameters: theme, language, plugins, or lang. The ...

CVE-2005-4593

phpDocumentor

CVE-2005-4599

The CVE-2005-4599 issue affects TinyMCE Compressor PHP prior to 1.06, with a Cross-site Scripting (XSS) vulnerability in tiny_mce_gzip.php exposed via the index parameter. The root cause is unvalidated input leading to script/HTML injection, allowing remote attackers to inject arbitrary web conte...