CVE-2005-2940

CVE-2005-2940 describes an unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1). Local users could gain privileges by placing a malicious file named program.exe in the C: drive, which could be executed by one of several Antispyware components: GIANTAntiSpywareMain....

CVE-2005-2939

VMware Workstation 5.0.0 build-13124 is affected by an unquoted Windows search path vulnerability that could let a local user gain privileges by placing a malicious C:\program.exe. Root cause: unquoted path in Windows search. Impact: local privilege escalation (consistency with CVSS 2.0 metrics)....

CVE-2005-3186

CVE-2005-3186 describes a heap-based buffer overflow in GTK+ gdk-pixbuf’s XPM image reader caused by an integer overflow when processing certain XPM files with many colors. The result is arbitrary code execution in affected environments. Connected advisories confirm the vulnerability affects gdk-...

CVE-2005-2929

The CVE-2005-2929 entry applies to Lynx 2.8.5 and earlier (pre-2.8.6dev.15). It describes remote command execution via lynxcgi:, lynxexec, and lynxprog links that are not properly restricted in default configurations in some environments, allowing an attacker to run arbitrary commands. Connected ...

CVE-2005-2975

CVE-2005-2975 affects the gdk-pixbuf XPM image reader in GTK+ (io-xpm.c): vulnerable in GTK+ builds prior to 2.8.7 to denial-of-service via a crafted XPM image with many colors (infinite loop). Remediation: upgrade to GTK+ 2.8.7 or apply the upstream security update/version referenced by the advi...

CVE-2005-2938

CVE-2005-2938 affects Apple iTunes for Windows (iTunesHelper.exe) prior to iTunes 6. The vulnerability is an unquoted Windows search path in iTunesHelper.exe, which could allow a local user to gain privileges by placing a malicious C:\program.exe. Affected versions include iTunes 4.7.1.30 and iTu...

CVE-2005-2976

CVE-2005-2976 describes an integer overflow in io-xpm.c of gdk-pixbuf 0.22.0 used by GTK+ (pre-2.8.7). An XPM image with large height/width/color values can crash the process or allow arbitrary code execution. The issue is caused by overflow in XPM parsing. Affected product: gdk-pixbuf/GTK+ up to...

CVE-2005-2936

CVE-2005-2936 is an unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 and RealPlayer 10/RealOne Player lines (versions 6.0.12.1040–6.0.12.1348; Pre-20060322 RealPlayer 8; RealOne Player v1/v2), which could allow a local user to gain privileges by placing a malicious C:\pr...

CVE-2005-1925

CVE-2005-1925 concerns multiple directory traversal vulnerabilities in TikiWiki before 1.9.1. The issues reside in tiki-editpage.php (suck_url) and tiki-user_preferences.php (language) where user-controlled input is read as file paths without proper sanitization, enabling reading arbitrary files ...

CVE-2005-3116

VERITAS NetBackup Enterprise Server's Volume Manager Daemon (vmd) contains a stack-based buffer overflow in a shared library used by vmd. A crafted packet can overflow the buffer via port 13701/tcp, potentially allowing remote code execution with SYSTEM/root privileges. Affected versions include ...

CVE-2005-2975

io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service infinite loop via a crafted XPM image with a large number of colors...

[SECURITY] [DSA 900-1] New fetchmail packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-1 [email protected] http://www.debian.org/security/ Martin Schulze November 18th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 900-1] New fetchmail packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-1 [email protected] http://www.debian.org/security/ Martin Schulze November 18th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2975

io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service infinite loop via a crafted XPM image with a large number of colors...

CVE-2005-2975

io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service infinite loop via a crafted XPM image with a large number of colors...

CVE-2005-3348

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...

CVE-2005-3347

Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. dot dot sequences in the 1 sensorprogram parameter or the 2...

CVE-2005-3189

CVE-2005-3189 concerns Qualcomm WorldMail IMAP Server, which contains a directory traversal vulnerability. The issue allows authenticated remote attackers to read (and potentially manipulate) email messages stored on the server by exploiting path traversal in IMAP commands (notably via selecting ...

CVE-2005-3348

CVE-2005-3348 is a HTTP Response Splitting vulnerability in phpSysInfo (2.4 and earlier) used by phpGroupWare (0.9.16 and earlier) and eGroupWare (before 1.0.0.009). Exploitation via CRLF sequences in the charset parameter can cause web content spoofing and cache poisoning. OpenVAS entries (and D...

CVE-2005-3662

The CVE-2005-3662 issue affects netpbm’s pnmtopng utility. A specific off-by-one/buffer overflow occurs when converting 256-color PNM files, particularly with the -alpha option, which can crash pnmtopng and may allow arbitrary code execution according to multiple references. Affected products inc...