10533 matches found
Fedora Core 3 : gpdf-2.8.2-6.2 (2005-1146)
Several more flaws were discovered in Xpdf, which is used internally by gpdf. An attacker could construct a carefully crafted PDF file that could cause gpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to...
Fedora Core 3 : cups-1.1.22-0.rc1.8.8 (2005-1141)
This update fixes a security problem in the pdftops filter CVE-2005-3191, CVE-2005-3192, CVE-2005-3193. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...
Fedora Core 4 : cups-1.1.23-15.2 (2005-1142)
This update fixes a security problem in the pdftops filter CVE-2005-3191, CVE-2005-3192, CVE-2005-3193. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...
Fedora Core 3 : perl-5.8.5-22.FC3 (2005-1145)
o Updated upstream fix for sprintf integer overflow vulnerabilities CVE-2005-3962 and CVE-2005-3912, including new Sys::Syslog 0.08 o Updated fix for bug 136009 / MakeMaker LDRUNPATH issue: restore previous default Red Hat behavior of removing the MakeMaker generated LDRUNPATH setting from the li...
[SECURITY] [DSA 922-1] New Linux 2.6.8 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 922-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2005 http://www.debian.org/security/faq -...
CVE-2005-1929
Multiple heap-based buffer overflows in 1 isaNVWRequest.dll and 2 relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunk...
CVE-2005-1929
Trend Micro ServerProtect Management Console (versions 5.58 and earlier, used in Control Manager 2.5/3.0 and Damage Cleanup Server 1.1) is affected by heap-based buffer overflows in two ISAPI DLLs, isaNVWRequest.dll and relay.dll, triggered by processing large chunked POST requests with wrapped l...
CVE-2005-1929
Multiple heap-based buffer overflows in 1 isaNVWRequest.dll and 2 relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunk...
CVE-2005-3360
The CVE-2005-3360 issue affects Trend Micro PC-Cillin Internet Security 2005, version 12.00 build 1244 (and likely earlier builds). The vulnerability arises from insecure default ACLs installed with Trend Micro products, allowing local users to modify or move critical program files. This can enab...
CVE-2005-1930
CVE-2005-1930 affects Trend Micro ServerProtect Management Console 5.58 (used with Control Manager 2.5/3.0 and Damage Cleanup Server 1.1). The issue is an input validation flaw in rptserver.asp handling the IMAGE parameter, enabling directory traversal and remote viewing of arbitrary files on the...
[SECURITY] [DSA 921-1] New Linux 2.4.27 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 921-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2005 http://www.debian.org/security/faq -...
CVE-2005-3358
CVE-2005-3358 affects Linux kernel prior to 2.6.15: passing a 0 bitmask to set_mempolicy can trigger a kernel panic, enabling local denial of service. Public details in Debian DSAs and OpenVAS entries confirm the issue and list patched kernel versions (e.g., Debian 2.6.8-16sarge2; Red Hat/CentOS ...
CVE-2005-4242
Multiple cross-site scripting XSS vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the address book and 2 contact data...
CVE-2005-4225
Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands via 1 the category parameter in add.php, 2 the catdesc parameter in addcat.php, 3 the level and user parameters in adduser.php, 4 the postid parameter in...
CVE-2005-4217
Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$" variable to set uid, which allows attackers to gain privileges...
CVE-2005-4238
Cross-site scripting XSS vulnerability in viewfilterspage.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the targetfield parameter...
CVE-2005-4224
Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via 1 the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, 2 the contentcomment, contentrating, and contentsummary parameters...
CVE-2005-4220
Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between one system on the internal interface and another on the external interface, which temporarily stops routing between the interfaces, as demonstrated using nma...