CVE-2005-3523

Format string vulnerability in friendsd2 in GpsDrive allows remote attackers to execute arbitrary code via the dir direction field...

CVE-2005-3524

Buffer overflow in the SSL-ready version of linux-ftpd linux-ftpd-ssl 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command...

CVE-2005-3524

CVE-2005-3524 affects the Linux FTP daemon with SSL support, linux-ftpd-ssl, specifically vulnerable in version 0.17 to a remote buffer overflow triggered by a long directory name and an XPWD command, enabling arbitrary code execution. Public advisories (Debian DSA-896-1, GLSA-200511-11, Gentoo G...

CVE-2005-3523

CVE-2005-3523 corresponds to a format-string vulnerability in gpsdrive (also referred to as gpsdrive/friendsd2) that allows remote code execution via the dir (direction) field. Publicly documented advisories confirm a remote vulnerability in gpsdrive and note that the issue was fixed in Debian wi...

GLSA-200511-05 : GNUMP3d: Directory traversal and XSS vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-05 GNUMP3d: Directory traversal and XSS vulnerabilities Steve Kemp reported about two cross-site scripting attacks that are related to the handling of files CVE-2005-3424, CVE-2005-3425. Also reported is a directory travers...

DSA-809-3 squid - assertion error

Bulletin has no description...

DSA-887-1 clamav - several

Bulletin has no description...

lynx

New Lynx packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. An overflow could result in the execution of arbitrary code when using Lynx to connect to a malicious NNTP server. More details about this issue may be found in the Common...

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

CVE-2005-3513

index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a viewforum action with the f parameter set to a single quote '...

CVE-2005-3515

Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

CVE-2005-3518

SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the oldsearches parameter...

CVE-2005-3520

CVE-2005-3520 affects MySource 2.14.0 with multiple XSS weaknesses. The vulnerability is triggered via several parameters across PHP/HTML files: target_url (upgrade_in_progress_backend.php), stylesheet (edit_table_cell_type_wysiwyg.php), and bgcolor (insert_table.php, edit_table_cell_props.php, h...

CVE-2005-3522

CVE-2005-3522 affects ManageEngine Netflow Analyzer 4.0.2. The vulnerability is a reflected cross-site scripting (XSS) in index.jsp via the grDisp parameter, allowing an attacker to inject arbitrary web script or HTML. The provided documents do not specify the exact root cause code path, versions...

CVE-2005-3516

CVE-2005-3516 is a cross-site scripting (XSS) vulnerability in Chipmunk Directory Script, specifically in the file recommend.php where the entryID parameter can be exploited by remote attackers to inject arbitrary web script or HTML. The connected PT-2005-4312 advisory corroborates this descripti...

CVE-2005-3124

CVE-2005-3124 affects the syslogtocern script in Acme thttpd prior to 2.23, enabling local attackers to overwrite arbitrary files via a symlink attack on a temporary file. Public advisories (Debian DSA-883-1, SUSE, Ubuntu, OpenVAS/Nessus entries) describe insecure temporary-file handling in thttp...

CVE-2005-3516

Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the entryID parameter...

CVE-2005-3519

Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the 1 INCLUDEPATH and 2 SQUIZLIBPATH parameters in newupgradefunctions.php, 3 the INCLUDEPATH parameter in initmysource.php, and the PEARPATH...

CVE-2005-3508

CVE-2005-3508 : A SQL injection in showGallery.php of Gallery (Galerie) 2.4 is exploitable via the galid parameter, allowing remote execution of arbitrary SQL commands. Affected component: Gallery/Galerie, version 2.4. The description states the vulnerability but does not provide any patch versio...