CVE-2005-4459

The CVE-2005-4459 issue is a heap-based buffer overflow in VMware’s NAT service components vmnat.exe and vmnet-natd across several products (Workstation 5.5, GSX Server 3.2, ACE 1.0.1, Player 1.0). The flaw is triggered by malformed FTP PORT and EPRT commands processed by the NAT service, allowin...

[SECURITY] [DSA 924-1] New nbd packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 924-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 924-1] New nbd packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 924-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2005 http://www.debian.org/security/faq -...

CVE-2005-4450

Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to serverprivileges.php, as demonstrated using the dbname and checkprivs parameters. NOTE: the provenance of this issue is unknown,...

Immunity Canvas: WORLDMAIL

Name| worldmail ---|--- CVE| CVE-2005-4267 Exploit Pack| CANVAS Description| WorldMail Notes| CVE Name: CVE-2005-4267 VENDOR: Qualcomm CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4267 CVSS: 7.5...

CVE-2005-4267

Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "" character, as demonstrated using long 1 LIST, 2 LSUB, 3 SEARCH TEXT, 4 STATUS INBOX, 5 AUTHENTICATE, 6 FETCH, 7 SELECT, and 8 COPY commands...

CVE-2005-4448

CVE-2005-4448 concerns FlatNuke 2.5.6 where authentication credentials are verified using an MD5 checksum of the admin name and the hashed password instead of the plaintext password. This allows an attacker who can obtain the password hash (notably via CVE-2005-2813) to compute credentials and in...

CVE-2005-4455

CVE-2005-4455 affects cleanhtml.pl 1.129 in LiveJournal CVS prior to 13 Dec 2005. The issue arises from injecting scripting languages via the XSL namespace in XML, exploitable through vectors such as customview.cgi. Impact is remote code execution-like scripting injection, as described by the vul...

CVE-2005-4456

CVE-2005-4456 describes multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 prior to patch ME-10009, enabling remote attackers to crash the service and possibly execute arbitrary code via long LIST, LSUB, and UID FETCH commands. The description notes these may be alternat...

CVE-2005-4452

CVE-2005-4452 describes an information-disclosure flaw where a CallCenterData.mdb database is stored under the web root with insufficient access control. This allows remote attackers to potentially retrieve usernames and passwords. The CVSSv2 score is 5.0 (Medium) with Network access, Low complex...

CVE-2005-4457

CVE-2005-4457 affects MailEnable Enterprise 1.1 prior to patch ME-10009. The issue allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via several triple-dot sequences in a UID FETCH command. Impact is limited to the described exposure in MailEnable...

CVE-2005-3657

The CVE-2005-3657 issue affects McAfee Security Center’s MCINSCTL.DLL ActiveX control. The McLog object (MCINSTALL.McLog) allows logging, but the control does not restrict which domains may load it because it does not use the IObjectSafetySiteLock API. This enables remote attackers to create or a...

CVE-2005-4454

CVE-2005-4454 affects LiveJournal’s cleanhtml.pl 1.129 prior to Dec 7, 2005. The issue arises when the cleancss option is enabled: a backslash in a javascript: URL within a style property can bypass the javascript check and be rendered as script in browsers that permit scripting in styles, enabli...

CVE-2005-4458

Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $ISOWNER, $ISADMIN, and $ISMANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITEMGR group...

CVE-2005-4449

The CVE-2005-4449 entry concerns verify.php in FlatNuke 2.5.6 , where remote authenticated administrators can modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting code via the body parameter. This describes a privilege-elevation-like issue within an authenti...

CVE-2005-4453

CVE-2005-4453 concerns Ultraapps Issue Manager prior to 2.1. A remote authenticated user can gain administrator privileges by tampering with parameters in UserProfile.aspx (p_User_user_id and User_user_id) and then modifying the password field. No patch or remediation details are provided in the ...

CVE-2005-4450

CVE-2005-4450 describes a CSRF vulnerability in phpMyAdmin 2.7.0 where remote attackers can perform unauthorized actions as a logged-in user by exploiting a link or IMG tag to server_priv privileges.php using dbname and checkprivs. Related OSV/NVD entries also reference a tied SQL injection discu...

CVE-2005-4451

CVE-2005-4451 concerns an unspecified vulnerability in HP-UX 11.11 Software Distributor that allows remote access to an affected system. The vulnerability is described as having unspecified attack vectors and affects HP-UX B.11.11; no exploit details are provided in the initial documents. Related...

CVE-2005-4453

UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original 1 pUseruserid and 2 Useruserid parameters to UserProfile.aspx, then modifying the password field...

CVE-2005-4458

The CVE-2005-4458 entry concerns Metadot Portal Server (Group.pm) versions 6.4.4 and earlier. The flaw stems from not resetting the global privilege flags ($IS_OWNER, $IS_ADMIN, $IS_MANAGER) when performing privilege checks, enabling a user to grant themselves administrator rights by adding to th...