CVE-2005-4465

The CVE-2005-4465 entry concerns IKEv1 in NEC UNIVERGE IX1000/IX2000/IX3000, where crafted IKE packets can cause a denial of service and possibly arbitrary code execution, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Connected sources also reference related IKEv1 issues (CVE-2005-36...

[Full-disclosure] MDKSA-2005:235 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:235 http://www.mandriva.com/security/ Package : kernel Date : December 21, 2005 Affected: 2006.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in th...

VERITAS Backup Exec CONNECT_CLIENT_AUTH buffer overflow

Added: 12/22/2005 CVE: CVE-2005-0773 BID: 14022 OSVDB: 17624 Background VERITAS Backup Exec is a network backup solution for Windows and Netware servers. Problem VERITAS Backup Exec is affected by a buffer overflow when handling CONNECTCLIENTAUTH requests with the Windows user authentication type...

CVE-2005-4464

The vulnerability CVE-2005-4464 affects Ingate Firewall (before 4.3.4) and SIParator (before 4.3.4). A remote attacker can cause a denial-of-service (kernel deadlock) by sending a SYN packet for a TCP stream that requires an RST in response. No remediation or mitigation details are provided in th...

CVE-2005-4466

Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab...

CVE-2005-4472

Macromedia JRun 4 Web Server (JWS) is affected by a stack-based buffer overflow when converting long requests to wide characters, enabling remote denial of service and potentially arbitrary code execution. Affected component: JRun 4 web server (JWS). Root cause: improper handling of long requests...

CVE-2005-4470

CVE-2005-4470 involves a heap-based buffer overflow in Blender’s BlenLoader (get_bhead in readfile.c) from Blender 2.0 to 2.40pre. A crafted .blend with a negative bhead.len can allocate less memory than needed, enabling denial of service (crash) and potentially arbitrary code execution. Public r...

VERITAS Backup Exec CONNECT_CLIENT_AUTH buffer overflow

Added: 12/22/2005 CVE: CVE-2005-0773 BID: 14022 OSVDB: 17624 Background VERITAS Backup Exec is a network backup solution for Windows and Netware servers. Problem VERITAS Backup Exec is affected by a buffer overflow when handling CONNECTCLIENTAUTH requests with the Windows user authentication type...

CVE-2005-4470

Heap-based buffer overflow in the getbhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be...

CVE-2005-4465

The Internet Key Exchange version 1 IKEv1 implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of...

MySQL MaxDB WebTools special character buffer overflow

Added: 12/22/2005 CVE: CVE-2005-0684 BID: 13368 OSVDB: 15816 Background MaxDB is a SAP-certified open-source database developed by MySQL. The WebTools component offers a set of database tools which are accessible from a web browser. The wahttp program listens on port 9999 and processes HTTP...

CVE-2005-4469

CVE-2005-4469 affects PhpGedView up to version 3.3.7. The vulnerability arises from multiple direct static code injections where user-controlled input in login.php (username) and login_register.php (user_language, user_email, user_gedcomid) is directly inserted into authenticate.php, enabling rem...

CVE-2005-4468

The CVE-2005-4468 issue affects PHPGedView 3.3.7 and earlier, where a PHP remote file include vulnerability exists in help_text_vars.php. An attacker can supply a URL via the PGV_BASE_DIRECTORY parameter, leading to remote code execution on the affected host. This is evidenced by NVD descriptions...

CVE-2005-4467

CVE-2005-4467 affects PhpGedView up to version 3.3.7, with a directory traversal/remote file inclusion in help_text_vars.php via the PGV_BASE_DIRECTORY parameter. The underlying issue is insufficient input sanitization, allowing an attacker to read arbitrary files and, under certain conditions (e...

CVE-2005-4463

WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to 1 wp-includes/vars.php, 2 wp-content/plugins/hello.php, 3 wp-admin/upgrade-functions.php, 4 wp-admin/edit-form.php, 5 wp-settings.php, and 6 wp-admin/edit-form-comment.php, which leaks the path ...

CVE-2005-4463

WordPress 2.0.2 through 2.0.5 is affected by CVE-2006-4743: remote attackers can obtain sensitive information by directly requesting specific PHP files (e.g., 404.php, akismet.php, archive.php, archives.php, attachment.php, blogger.php, comments.php, comments-popup.php, dotclear.php, footer.php, ...

CVE-2005-4463

WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to 1 wp-includes/vars.php, 2 wp-content/plugins/hello.php, 3 wp-admin/upgrade-functions.php, 4 wp-admin/edit-form.php, 5 wp-settings.php, and 6 wp-admin/edit-form-comment.php, which leaks the path ...

CVE-2005-4462

The CVE-2005-4462 entry concerns Tolva PHP website system 0.1.0, where a PHP remote file inclusion in usermods.php via the ROOT parameter allows arbitrary code execution from a URL. Documents do not provide an official fix or patched version; remediation details are not stated. If exploitable, im...

CVE-2005-4460

Beehive Forum before or at version 0.6.2 is affected by a cross-site scripting (XSS) vulnerability in links.php and links_add.php. The issue allows remote attackers to inject arbitrary web script or HTML via the Name, Description, and Comment fields. The CVE-2005-4460 description in the provided ...

CVE-2005-4461

The CVE-2005-4461 entry concerns Beehive Forum (version 0.6.2 and earlier) with a SQL injection in index.php triggered by the user_sess parameter. The underlying issue allows an attacker to remotely execute arbitrary SQL commands, affecting the database via the vulnerable script. The available re...