CVE-2005-4267

CVE-2005-4267 is a stack-based buffer overflow in the Qualcomm WorldMail IMAP Server 3.0. An unauthenticated remote attacker can trigger arbitrary code execution by sending crafted IMAP commands that end with a ‘}’, notably LIST/LSUB/SEARCH/STATUS/SELECT/etc. Affected builds are reported as 6.1.1...

kdegraphics security update

CentOS Errata and Security Advisory CESA-2005:868 Updated kdegraphics packages that resolve several security issues in kpdf are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for th...

perl security update

CentOS Errata and Security Advisory CESA-2005:880 Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming languag...

CVE-2005-4440

The CVE describes a vulnerability in the 802.1q VLAN protocol where a crafted frame containing two 802.1q tags can cause the second tag to be redirected after the first is stripped, enabling a remote attacker to bypass network segmentation and spoof VLANs. Demonstrated by the tool Yersinia (doubl...

CVE-2005-4446

The CVE-2005-4446 entry documents a Cross-site Scripting (XSS) vulnerability in index.asp of ASPBite 8.x, where an attacker can inject arbitrary web script or HTML via the strSearch parameter. The concrete vulnerability is a reflected/stored XSS in a web application component (index.asp) that pro...

CVE-2005-4444

Pegasus Mail 4.21a–4.21c and 4.30PB1 are affected by a stack-based buffer overflow in the trace message functionality that can be triggered by a long POP3 reply, allowing remote code execution. This CVE entry (CVE-2005-4444) is based on publicly documented details across multiple sources (NVD/CVE...

CVE-2005-4447

Affected product: phpCOIN 1.2.2. Vulnerability: SQL injection in articles_funcs.php via the rec_next parameter, enabling modification of SQL syntax and, in some environments, potential error-message disclosure after an ORDER BY clause. The original disclosure notes that command injection is not f...

CVE-2005-4441

The CVE-2005-4441 entry describes a PVLAN vulnerability where remote attackers can bypass network segmentation and spoof PVLAN traffic by crafting a PVLAN message whose target MAC is set to a gateway router. This causes the packet to be forwarded to the router, where the source MAC is modified, e...

CVE-2005-4442

CVE-2005-4442 describes an untrusted search path vulnerability in Gentoo’s OpenLDAP before 2.2.28-r3, where a malicious shared object placed in the Portage temporary build directory (RUNPATH) could be loaded by a binary, enabling local privilege escalation for portage group users. Connected advis...

CVE-2005-4445

CVE-2005-4445 affects Pegasus Mail client versions 4.21a–4.21c and 4.30PB1. An off-by-one error in email header processing causes a one-byte buffer overflow , enabling remote attackers to execute arbitrary code by sending a crafted long header. Exploitation is remote; no authentication is indicat...

CVE-2005-4443

Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH...

CVE-2005-4443

The CVE-2005-4443 entry concerns Gauche before 0.8.6-r1 on Gentoo Linux, where a local user in the portage group can gain privileges by placing a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. Connected advisories (e.g., Gentoo GLSA 200512-07 and R...

CVE-2005-4435

CVE-2005-4435 describes a cross-site scripting (XSS) vulnerability in the AbleDesign D-Man 3.x product, occurring in index.php via the title parameter. An attacker could inject arbitrary web script or HTML by supplying a crafted title value. The connected documents confirm the affected component ...

CVE-2005-4434

CVE-2005-4434 affects AbleDesign ReSearch 2.x with a Cross-site scripting (XSS) vulnerability. The vectors are unknown, allowing remote injection of arbitrary script/HTML. Impact: partial integrity, no confidentiality or availability impact stated. The provided data does not specify exploitable c...

CVE-2005-4438

CVE-2005-4438 describes a heap-based/buffer overflow in Dec2Rar.dll 3.2.14.3 (Symantec Antivirus Library) used by various Symantec products. A remote attacker could trigger the overflow by processing crafted RAR archives with sub-block headers containing incorrect length values, potentially allow...

CVE-2005-4436

The CVE-2005-4436 entry concerns Extended Interior Gateway Routing Protocol (EIGRP) v1.2, implemented in Cisco IOS (post 12.3(2), 12.3(3)B, 12.3(2)T) and related products. A remote attacker can cause a denial-of-service by sending a spoofed neighbor announcement that uses (1) mismatched k values ...

CVE-2005-4439

CVE-2005-4439 affects the elog/elogd component in ELOG prior to corrected releases. The issue is a buffer overflow when processing URL parameters (notably long cmd or mode parameters), enabling remote attackers to crash the application and potentially execute arbitrary code. Connected advisories ...

CVE-2005-4437

MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol EIGRP 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code MAC in the checksum, which allows remote attackers to sniff message hashes and 1 replay EIGRP HELLO messages or 2 cause...

CVE-2005-4433

CVE-2005-4433 describes an XSS vulnerability in the search.php component of Esselbach Storyteller CMS 1.8. The vulnerability arises from using the query parameter in the Search field, allowing remote attackers to inject arbitrary web script or HTML. The available records explicitly cite this CMS ...

CVE-2005-4437

CVE-2005-4437 describes a vulnerability in Extended Interior Gateway Routing Protocol (EIGRP) 1.2 as implemented in Cisco IOS 11.3 and later, where the MD5 neighbor authentication does not include the Message Authentication Code (MAC) in the checksum. This enables remote attackers to sniff messag...