[SECURITY] [DSA 917-1] New courier packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 917-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 917-1] New courier packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 917-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

CVE-2005-4079

The registerglobals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the importblacklist variable in grabglobals.php, which can then be used to overwrite other variables...

CVE-2005-4070

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3665. Reason: This candidate is a reservation duplicate of CVE-2005-3665. Notes: All CVE users should reference CVE-2005-3665 instead of this candidate. All references and descriptions in this candidate have been removed to...

DEBIAN-CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

CVE-2005-4077

Multiple off-by-one errors in the cURL library libcurl 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that 1 are malformed in a way that prevents a terminating null byte from being added to...

CVE-2005-4082

Consolidated details for CVE-2005-4082 show: the dhcp.client program on QNX 4.25 vmware is setuid, reportedly by default, enabling local users to modify NIC configuration and potentially carry out additional attacks. This denotes a local-privilege issue stemming from a setuid binary. The availabl...

CVE-2005-4074

The CVE-2005-4074 entry describes a directory traversal vulnerability in CF_Nuke 4.6 and earlier. When Sandbox Security is disabled, remote attackers can cause local .cfm files to be included via a ".." in the (1) sector or (2) page parameters. The connected documents provide this exact vulnerabi...

CVE-2005-4078

CVE-2005-4078 describes multiple cross-site scripting (XSS) flaws in Ideal BB.NET 1.3 and earlier. The vulnerabilities permit remote injection of arbitrary web script or HTML via parameters in topics.aspx (forumID, boardID, topicRepeater1-p), categoryindex.aspx (boardID), posts.aspx (postID), for...

CVE-2005-4070

...

CVE-2005-3192

CVE-2005-3192 is a heap-based buffer overflow in the StreamPredictor function of Xpdf 3.01 that allows remote code execution via a PDF with an out-of-range numComps field. The vulnerability affects downstream products that bundle or rely on Xpdf, including Poppler, teTeX, KDE kpdf, pdftohtml, KOf...

CVE-2005-4070

CVE-2005-4070 entry is rejected/unused; refer to CVE-2005-3665.

CVE-2005-4072

The CVE describes a cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier, where an attacker can inject arbitrary script via the Words parameter in search_forums.cfm used in the “Search For:” field. The available records confirm the affected software and the inp...

CVE-2005-4084

The CVE-2005-4084 issue affects the phpBB eXtreme Styles module (

CVE-2005-4069

CVE-2005-4069 concerns SunnComm MediaMax DRM 5.0.21.0, used by Sony BMG, which is installed with insecure permissions on the file path "\Program Files\Common Files\SunnComm Shared". The installer grants Everyone full control to the MediaMax directory, enabling a local user to replace or modify bi...

CVE-2005-4075

CVE-2005-4075 corresponds to multiple cross-site scripting (XSS) vulnerabilities in index.cfm of CF_Nuke 4.6 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the news sector parameters (1) topic and (2) newsid, and the links sector parameter (3) cat. The d...

CVE-2005-4076

The CVE-2005-4076 entry concerns Appfluent Technology Database IDS 2.0. A buffer overflow can be triggered by a long APPFLUENT_HOME environment variable, allowing local users to execute arbitrary code. The vulnerability is local in scope with partial confidentiality, integrity, and availability i...

CVE-2005-4081

CVE-2005-4081 involves multiple SQL injection vulnerabilities in Alisveristr E-commerce. The issues affect login functionality (user and administrator login pages) and allow remote attackers to bypass authentication and potentially execute arbitrary SQL commands through the username and password ...