[SECURITY] [DSA 926-1] New ketm packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 926-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23rd, 2005 http://www.debian.org/security/faq -...

CVE-2005-4512

CVE-2005-4512 : Affected product: WAXTRAPP 3.0.1 and earlier. Vulnerability: cross-site scripting (XSS) allowing remote attackers to inject arbitrary script/HTML via unspecified search parameters. Severity: base score 4.3 (Medium) with Network attack vector, medium complexity, no authentication r...

CVE-2005-4511

The CVE-2005-4511 is a format-string vulnerability in TN3270 Resource Gateway 1.1.0. The underlying issue is unvalidated format specifiers in syslog function calls, enabling local users to cause a denial of service and potentially execute arbitrary code. The vulnerability is characterized by a lo...

CVE-2005-4510

CVE-2005-4510 : A directory traversal vulnerability affects NetPublish Server 7’s server.np, enabling remote attackers to read arbitrary files through "../" sequences in the template parameter. The issue is documented across multiple sources (NVD, CVE list) with a MEDIUM base score (AV:N/AC:L/I:P...

CVE-2005-4514

CVE-2005-4514 concerns the Webwasher CSM Appliance Suite 5.x, where the encapsulation script mechanism uses case-sensitive detection of malicious tokens. This allows bypassing script detection by presenting tokens in mixed case (upper/lower). The vendor notes the issue could not be reproduced as ...

CVE-2005-4513

The CVE-2005-4513 entry describes a Cross-site Scripting (XSS) vulnerability in the product WANDSOFT e-SEARCH . An attacker could trigger the issue by supplying crafted input in the search parameters (possibly the keywords parameter) that is reflected in the web page, enabling remote script/HTML ...

CVE-2005-4515

The vulnerability is a SQL injection in WebDB versions 1.1 and earlier caused by code handling search parameters (unclear exact parameter, possibly Search0). Affected component is WebDB, with the root cause in custom/testing code that previously allowed SQL in query strings. The vendor disputes t...

USN-231-1: Linux kernel vulnerabilities

Rudolf Polzer reported an abuse of the 'loadkeys' command. By redefining one or more keys and tricking another user like root into logging in on a text console and typing something that involves the redefined keys, a local user could cause execution of arbitrary commands with the privileges of th...

CVE-2005-4506

Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd file, which allows local users to gain privileges...

[Full-disclosure] SEC Consult SA-20051223-1 :: File Disclosure using df_next_page parameter in OracleAS Discussion Forum Portlet

SEC Consult Security Advisory 20051223-1 ======================================================================== title: File Disclosure using dfnextpage parameter in OracleAS Discussion Forum Portlet program: OracleAS Discussion Forum Portlet vulnerable version: Version of May 2005 homepage:...

CVE-2005-4507

CVE-2005-4507 documents multiple cross-site scripting (XSS) vulnerabilities in Nexus Concepts Dev Hound 2.24 and earlier. Affected component: the web application’s user input handling where unvalidated inputs can lead to script/HTML injection. Impact is partial integrity compromise of affected pa...

CVE-2005-4505

CVE-2005-4505 describes an unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5). The underlying issue is an unquoted Program Files path that causes naPrdMgr.exe to execute EntVUtil.EXE, enabling local users to gain privileges via a malici...

CVE-2005-4506

Nexus Concepts Dev Hound 2.24 and earlier stores usernames and passwords in cleartext in the devhound.tdbd file, enabling local users to gain privileges. Affected component: Dev Hound data store file devhound.tdbd. Root cause: credentials saved in cleartext. Impact: local privilege escalation if ...

CVE-2005-4504

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service memory consumption and application crash via HTML files with a large ROWSPAN attribute in a TD tag...

CVE-2005-3536

SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type...

CVE-2005-3660

Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service memory exhaustion and panic by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process ...

CVE-2005-3660

CVE-2005-3660 affects the Linux kernel 2.4.x and 2.6.x. The vulnerability occurs when a process creates a large number of connected file descriptors or socketpairs and uses a large data transfer buffer, which can exhaust memory and cause a kernel panic or denial of service. The underlying issue c...

CVE-2005-3536

CVE-2005-3536 : SQL injection in phpBB 2 prior to 2.0.18 via the topic type. Multiple connected advisories (Debian DSA-925-1, OpenVAS entries) confirm the vulnerability and suggest patching phpBB2 packages; remediation involves upgrading to the fixed phpBB version per the advisories. The affected...

CVE-2005-3537

CVE-2005-3537 affects phpBB 2 before 2.0.18, with a missing input/request validation flaw that enables remote attackers to edit private messages of other users by tampering with parameters or inputs. Public records in multiple feeds (NVD, Debian DSA, Red Hat, OpenVAS listings) confirm the vulnera...

CVE-2005-4504

The vulnerability CVE-2005-4504 affects Apple Mac OS X (10.4.3 and earlier) in the khtml::RenderTableSection::ensureRows function within KHTMLParser used by Safari and TextEdit. A remote attacker can trigger a denial of service (memory consumption and application crash) by parsing HTML files cont...