RHEL 4 : udev (RHSA-2005:864)

Updated udev packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The udev package contains an implementation of devfs in userspace using sysfs and /sbin/hotplug. Richard Cunningham discovered a...

RHEL 4 : curl (RHSA-2005:875)

Updated curl packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of th...

Eudora WorldMail IMAP LIST command buffer overflow

Added: 12/30/2005 CVE: CVE-2005-4267 BID: 15980 OSVDB: 22097 Background Eudora WorldMail is an e-mail server for Windows. Problem A long IMAP command ending with a close brace character could result in a buffer overflow, leading to remote command execution. Resolution Upgrade to a version of Eudo...

SUSE-SA:2005:071: perl

The remote host is missing the patch for the advisory SUSE-SA:2005:071 perl. Integer overflows in the format string functionality in Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap...

HP-UX PHCO_33822 : HP-UX Running Software Distributor (SD) Remote Unauthorized Access (HPSBUX02089 SSRT5983 rev.1)

s700800 11.11 Software Distributor Cumulative Patch : A potential vulnerability has been identified with HP-UX running Software Distributor SD programs. The vulnerability could be exploited by a remote user to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

RHEL 2.1 / 3 : netpbm (RHSA-2005:843)

Updated netpbm packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats. A stack...

RHEL 4 : gpdf (RHSA-2005:867)

An updated gpdf package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The gpdf package is a GNOME based viewer for Portable Document Format PDF files. Severa...

RHEL 3 / 4 : cups (RHSA-2005:878)

Updated CUPS packages that fix multiple security issues are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

RHEL 4 : perl (RHSA-2005:880)

Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...

RHEL 4 : kdegraphics (RHSA-2005:868)

Updated kdegraphics packages that resolve several security issues in kpdf are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment including kpdf, a pdf file...

CVE-2005-4584

BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service application crash via a callsign that is not followed by a NULL \0 character...

CVE-2005-4563

SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the loginid parameter, a different vulnerability than CVE-2005-3875...

CVE-2005-4584

BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service application crash via a callsign that is not followed by a NULL \0 character...

CVE-2005-4566

Buffer overflow in the IKEv1 implementation of ADTRAN NetVanta (before version 10.03.03.E). The vulnerability arises in the IKEv1 processing and can be triggered by crafted IKE packets. The impact is reported as unknown within the provided documents, and no remediation details are given here. Aff...

CVE-2005-4584

BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service application crash via a callsign that is not followed by a NULL \0 character...

CVE-2005-4568

FTGate 4.4 (Build 4.4.000 Oct 26 2005) is affected by multiple format string vulnerabilities in both the POP3 and IMAP services. Specifically, remote attackers can trigger arbitrary code execution via format string specifiers in the POP3 commands (USER, PASS, TOP) and the IMAP commands (LIST, AUT...

CVE-2005-4573

Plogger (Beta 2) is affected by CVE-2005-4573 via plog-admin-functions.php where unsanitized input in config[basedir] is used in a PHP require_once, enabling remote file inclusion and potential arbitrary code execution if register_globals is enabled. Affected component: admin/plog-admin-functions...

CVE-2005-4576

CVE-2005-4576 affects Fatwire UpdateEngine (UpdateEngine) 6.2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the parameters COUNTRYNAME, EMAIL, and FUELAP_TEMPLATENAME, allowing remote attackers to inject arbitrary web script or HTML. The available doc...

CVE-2005-4584

BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service application crash via a callsign that is not followed by a NULL \0 character...

CVE-2005-4570

The CVE-2005-4570 entry concerns IKEv1 implementations in Fortinet FortiOS (versions 2.50, 2.80, 3.0), FortiClient 2.0, and FortiManager 2.80/3.0, where remote attackers can trigger a denial of service by sending IKE/ISAKMP packets with invalid IPSec attribute values. The issue is tied to process...