CVE-2005-3193

Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code JPXStream.c for xpdf 3.01 and earlier, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, 4 CUPS, and 5 libextractor allows user-assisted attackers to cause a denial of service heap...

Solaris 10 (sparc) : 121012-03

SunOS 5.10: traceroute patch. Date this patch was last updated by Sun : Feb/16/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 10 (sparc) : 121229-02

SunOS 5.10: libssl patch. Date this patch was last updated by Sun : Apr/23/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

RHEL 4 : xpdf (RHSA-2005:840)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:840 advisory. The xpdf package is an X Window System-based viewer for Portable Document Format PDF files. Several flaws were discovered in Xpdf. An attacke...

RHEL 2.1 / 3 : imap (RHSA-2005:850)

An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protoco...

Solaris 10 (x86) : 121013-03

SunOS 5.10x86: traceroute patch. Date this patch was last updated by Sun : Feb/16/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Security fix for the ALT Linux 5 package xpdf version 3.01-alt2pl1

Dec. 7, 2005 Victor Forsyuk 3.01-alt2pl1 - Security fix CAN-2005-3193. - Updated japanese and korean support packages. - Fix allocation size for 64bit architecture. - Fix to don't use freetype internals. - Apply upstream patch to fix resize/redraw...

Fedora Core 3 : perl-5.8.5-18.FC3 (2005-1116)

Fixes security vulnerabilites: CVE-2005-3962: http://marc.theaimsgroup.com/?l=full-disclosure&m=113342788118630&w=2 CVE-2005-3912: https://vulners.com/cve/CVE-2005-3912 CVE-2005-0452: https://vulners.com/cve/CVE-2005-0452 CVE-2004-0976: https://vulners.com/cve/CVE-2004-0976 Note that Tenable...

RHEL 4 : libc-client (RHSA-2005:848)

Updated libc-client packages that fix a buffer overflow issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. C-client is a common API for accessing mailboxes. A buffer overflow flaw was discovered in the way C-client parses...

CVE-2005-3193

The CVE-2005-3193 issue is a heap-based buffer overflow in the JPXStream::readCodestream function of the JPX stream parsing code (JPXStream.c) used by xpdf 3.01 and earlier, and by downstream components such as Poppler, teTeX, KDE kpdf, CUPS, and libextractor. The overflow can be triggered by cra...

libc security update

CentOS Errata and Security Advisory CESA-2005:848 Updated libc-client packages that fix a buffer overflow issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. C-client is a common API for accessing mailboxes. A buffer overfl...

imap security update

CentOS Errata and Security Advisory CESA-2005:850 An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP Internet...

Moderate: Red Hat Security Advisory: libc-client security update

Updated libc-client packages that fix a buffer overflow issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. C-client is a common API for accessing mailboxes. A buffer overflow flaw was discovered in the way C-client parses...

Important: Red Hat Security Advisory: xpdf security update

An updated xpdf package that fixes several security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 20 Dec 2005 The initial fix for these issues was incomplete. The packages have been updated with a more comple...

Moderate: Red Hat Security Advisory: imap security update

An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protoco...

CVE-2005-4036

Cross-site scripting XSS vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL."...

CVE-2005-4039

Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter...

CVE-2005-4032

Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4038

CVE-2005-4038: A SQL injection flaw exists in Web4Future Portal Solutions News Portal’s comentarii.php, exploitable via the idp parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Documents confirm the affected product and parameter but do not provide exploitat...

CVE-2005-4041

CVE-2005-4041 describes a cross-site scripting (XSS) vulnerability in the search.cgi component of MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x. The issue arises from injecting arbitrary script/HTML via the query string, enabling an attacker to trigger client-side code in affected users’...