CVE-2005-4077

CVE-2005-4077 affects libcurl (curl) versions 7.11.2–7.15.0, where multiple off-by-one errors can cause a buffer overflow. Exploitation is local and can trigger a denial of service or bypass PHP security restrictions via crafted URLs, either malformed to prevent a terminating null byte in hostnam...

CVE-2005-4068

The CVE-2005-4068 entry concerns an unspecified absolute path vulnerability in the AIX utility umountall, affecting IBM AIX 5.1–5.3 with local-access implications (exact impact and vectors not disclosed in the provided documents). Connected sources identify vendor patches related to bos.rte.files...

FreeFTPd user name buffer overflow

Added: 12/08/2005 CVE: CVE-2005-3683 BID: 15457 OSVDB: 20909 Background FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms. Problem An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command. Resolution Upgrade ...

SUSE-SA:2005:067: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:067 kernel. This kernel update for SUSE Linux 10.0 contains fixes for XEN, various security fixes and bug fixes. This update includes a more recent snapshot of the upcoming XEN 3.0. Many bugs have been fixed. Stability for x8664 h...

iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability

Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability iDefense Security Advisory 12.07.05 www.idefense.com/application/poi/display?id=348&type=vulnerabilities December 7, 2005 I. BACKGROUND The Dell TrueMobile 2300 Wireless Broadband Router is an 802.11b/g wireless...

FreeFTPd user name buffer overflow

Added: 12/08/2005 CVE: CVE-2005-3683 BID: 15457 OSVDB: 20909 Background FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms. Problem An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command. Resolution Upgrade ...

FreeFTPd user name buffer overflow

Added: 12/08/2005 CVE: CVE-2005-3683 BID: 15457 OSVDB: 20909 Background FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms. Problem An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command. Resolution Upgrade ...

Fedora Core 3 : gpdf-2.8.2-5.2 (2005-1125)

Several flaws were discovered in Xpdf, which is used internally by gpdf. An attacker could construct a carefully crafted PDF file that could cause gpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to thes...

FreeFTPd user name buffer overflow

Added: 12/08/2005 CVE: CVE-2005-3683 BID: 15457 OSVDB: 20909 Background FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms. Problem An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command. Resolution Upgrade ...

CVE-2005-4067

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4031. Reason: This candidate is a reservation duplicate of CVE-2005-4031. Notes: All CVE users should reference CVE-2005-4031 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-4067

CVE-2005-4067 is rejected/not used and does not represent an active vulnerability entry.

CVE-2005-4057

Cross-site scripting XSS vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Location, 2 Last Name, and 3 First Name parameters...

CVE-2005-4045

Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator TLA default password via unknown vectors, possibly involving configuretopleveladmin.ldif...

CVE-2005-4065

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-4059

CVE-2005-4059 describes an SQL injection vulnerability in LocazoList 1.03c and earlier, specifically in searchdb.asp, exploitable via the q parameter. The underlying issue is unsanitized input that enables remote attackers to alter SQL queries. Affected component: LocazoList search functionality ...

CVE-2005-4047

CVE-2005-4047 describes an XSS vulnerability in IISWorks ASPKnowledgeBase 2.0, affecting the kb.asp component. The flaw allows remote attackers to inject arbitrary web script or HTML via the a parameter. The available data does not specify affected versions beyond IISWorks KB 2.0, nor details on ...

CVE-2005-4046

Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct...

CVE-2005-4061

Technical details about CVE-2005-4061 are not provided in the connected documents; the initial description notes a cross-site scripting vulnerability in XcPhotoAlbum 1.x but no further specifics are given. Monitor for updates.

CVE-2005-4058

CVE-2005-4058 : A SQL injection vulnerability exists in SaralBlog 1.x and earlier that allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php. The CVE entry notes a base score of 7.5 (HIGH) with network attack vector, low complexity, and no authenticatio...

CVE-2005-4050

CVE-2005-4050 describes a buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08. The vulnerability arises from processing a long SIP INVITE field, allowing a remote attacker to execute arbitrary code. Affected product family: MultiVOIP devices (vendor: Multi-T...