CVE-2005-3804

The CVE-2005-3804 family is tied to Cisco IP Phone 7920 (VoIP) 1.0(8), where the device listens on UDP port 17185 to support a VxWorks debugger. This exposes a WDB debug service that remote attackers can use to obtain sensitive information and cause a denial of service. Related entries (Wind Rive...

CVE-2005-3788

CVE-2005-3788 affects Cisco ASA versions 7.0(0)–7.0(4) in Active/Standby with a failing failover LAN interface. A race condition allows remote attackers to cause a denial of service by sending spoofed ARP responses from the active firewall’s IP, preventing the standby unit from becoming active. P...

CVE-2005-3792

CVE-2005-3792 corresponds to SQL injection in the PHP-Nuke 7.8 Search module (and possibly earlier versions) that allows remote execution of arbitrary SQL commands via the query parameter in a stories type. Affected software is PHP-Nuke 7.8 with patch 3.1, and other versions before 7.9 may be vul...

[SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion

-------------------------------------------------------------------------- Debian Security Advisory DSA 910-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3787

CVE-2005-3787 concerns multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.6.4-pl4 . The issues allow remote attackers to inject arbitrary script/HTML via (1) the cookie-based login panel, (2) the title parameter, and (3) the table creation dialog. The connected documents...

OvBB SQL vulnerabilities.

OvBB SQL vulnerabilities. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/ovbb-sql-vulnerabilities.html Vendor:http://www.ovbb.org/ affected version: V0.08a and prior Vuln. description: Input passed to the "threadid" parameter in "thread.php" isn't...

DeskLance Vuln.

DeskLance Vuln. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/desklance-vuln.html Vendor:http://www.desklance.com/ affected version: 2.3 and prior Vuln. description: Input passed to the "main" parameter in "index.php" isn't properly verified,...

Zina SQL injection vulnerability.

Zina SQL injection vulnerability. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zina-sql-injection-vulnerability.html Vendor:http://www.pancake.org/zina/ affected version: Zina v.0.12.07 and prior. Vuln. description: Input passed to the "p"...

CVE-2005-3785

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX eix before 0.5.0pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program...

CVE-2005-3785

The CVE-2005-3785 issue affects eix (Ebuild IndeX) prior to 0.5.0_pre2, where a second-order symlink vulnerability in the eix-sync.in path allows a local user to overwrite arbitrary files via a symlink to the exi.X.sync temporary file, processed by diff-eix. Exploitation is local and depends on c...

BELL-CVE-2005-3784 CVE-2005-3784 does not affect BellSoft software

Bulletin has no description...

CVE-2005-3784

The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service crash and gain root privileges...

CVE-2005-3784

The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service crash and gain root privileges...

CVE-2005-3784

CVE-2005-3784 concerns the Linux kernel 2.6.x series: auto-reap of child processes can include ptrace-attached children, causing a dangling ptrace reference that leads to local denial of service (crash) and potential root privileges. The description specifies the vulnerable condition is present i...

CVE-2005-3783

CVE-2005-3783 affects the Linux kernel 2.6 before 2.6.14.2. The vulnerability lies in the ptrace.c implementation (ptrace functionality) where CLONE_THREAD can attach to a process without validating the thread group ID, allowing a local user to trigger a crash (Denial of Service). The issue is lo...

[SECURITY] [DSA 908-1] New sylpheed-claws packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 908-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 908-1] New sylpheed-claws packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 908-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...

CVE-2005-3781

The CVE-2005-3781 issue affects Solaris 9’s in.named and is described as a denial‑of‑service via manipulation causing unnecessary queries. Connected sources identify concrete remediation: SunOS 5.9 SPARC needs patch 112970-12 and SunOS 5.9 x86 needs patch 114354-11 to address libresolv. The exact...

CVE-2005-3777

MyBB 1.0 PR2 Rev 686 is affected by a vulnerability that allows remote attackers to delete or move private messages (PM) by submitting modified fields in the inbox form. The provided documents confirm the affected software and the manipulation vector, but do not specify root cause details beyond ...

CVE-2005-3778

The CVE-2005-3778 entry concerns MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686. The vulnerability is described as an unspecified DoS achievable via unknown vectors, affecting the affected component and resulting in partial availability impact. Connected sources confirm the product and version ran...