CVE-2005-3576

CVE-2005-3576 affects ts.exe in Walla TeleSite 3.0 and earlier. The vulnerability arises when an article number is supplied in the tsurl parameter, allowing remote attackers to access privileged information. The available documents confirm the affected software/component and the impact as informa...

CVE-2005-3578

SQL injection vulnerability in ts.exe aka ts.cgi in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary SQL commands via the sug parameter...

CVE-2005-3579

CVE-2005-3579 affects ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier. The vulnerability allows remote attackers to access arbitrary local files by manipulating the querystring. Public references (NVD) confirm the affected product/version and the local-file-access impact. No exploit code or...

APPLE-SA-2005-11-15 iTunes 6 for Windows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2005-11-15 iTunes 6 for Windows CVE-ID: CVE-2005-2938 Available for: Microsoft Windows XP and Microsoft Windows 2000 Impact: iTunes 5 for Windows may launch the wrong helper program Description: Due to the way iTunes 5 for Windows launches it...

iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability

Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability iDEFENSE Security Advisory 11.15.05 www.idefense.com/application/poi/display?id=339&type=vulnerabilities November 15, 2005 I. BACKGROUND GTK+ is a multi-platform toolkit for creating graphical user interfaces. Offering a...

gdk security update

CentOS Errata and Security Advisory CESA-2005:810 Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used wit...

Important: Red Hat Security Advisory: gdk-pixbuf security update

Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was fou...

[SECURITY] [DSA 897-1] New phpsysinfo packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 897-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 897-1] New phpsysinfo packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 897-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 896-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2005 http://www.debian.org/security/faq -...

RHEL 2.1 / 3 / 4 : lynx (RHSA-2005:839)

An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was found in the lynx 'lynxcgi:' URI handler. An attacker...

RHEL 4 : lm_sensors (RHSA-2005:825)

Updated lmsensors packages that fix an insecure file issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The lmsensors package includes a collection of modules for general SMBus access and hardware monitoring. This package...

DSA-897-1 phpsysinfo - programming errors

Bulletin has no description...

RHEL 3 / 4 : php (RHSA-2005:831)

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

Hardened-PHP Project Security Advisory 2005-21.81

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in phpSysInfo Release Date: 2005/11/13 Last Modified: 2005/11/12 Author: Christopher Kunz Application: phpSysInfo 2.4 and prior Severity: Cross-Site...

SUSE-SA:2005:064: pwdutils, shadow

The remote host is missing the patch for the advisory SUSE-SA:2005:064 pwdutils, shadow. Thomas Gerisch found that the setuid 'chfn' program contained in the pwdutils suite insufficiently checks it's arguments when changing the GECOS field. This bug leads to a trivially exploitable local privileg...

RHEL 2.1 : cpio (RHSA-2005:806)

An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local...

Fedora Core 4 : lynx-2.8.5-23.2 (2005-1079)

This update fixes CVE-2005-2929 lynxcgi: URLs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 3 : lynx-2.8.5-18.0.2 (2005-1078)

This update fixes CVE-2005-2929 lynxcgi: URLs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 3 : php-4.3.11-2.8 (2005-1061)

This update includes several security fixes : - fixes for prevent malicious requests from overwriting the GLOBALS array CVE-2005-3390 - a fix to stop the parsestr function from enabling the registerglobals setting CVE-2005-3389 - fixes for Cross-Site Scripting flaws in the phpinfo output...