CVE-2005-3495

CVE-2005-3495 affects Ar-blog (versions 5.2 and earlier). The vulnerability allows remote attackers to bypass authentication by manipulating cookies, indicating a flaw in how session/authentication state is enforced. The available documents confirm the vulnerability pattern (cookie-based auth byp...

CVE-2005-3490

CVE-2005-3490 affects the web server in Asus Video Security (versions 3.5.0.0 and earlier). The issue is a directory traversal vulnerability that lets remote attackers read arbitrary files by providing directory traversal sequences ("../" or "..\"). The vulnerability arises in the web server comp...

CVE-2005-3493

CVE-2005-3493 describes a denial-of-service vulnerability in Battle Carry versions up to 0.005, where remote attackers can send a large UDP packet that triggers a socket error and terminates the server's UDP listening socket. The provided documents do not include exploit details, affected product...

CVE-2005-3491

CVE-2005-3491 affects FlatFrag 0.3 and earlier. The vulnerability is in the receiver function of loop.c, where multiple buffer overflows can be triggered by the fields version, name, and model. This allows remote attackers to execute arbitrary code. The available documents do not specify the exac...

[Full-disclosure] Advisory: Apple QuickTime PICT Remote Memory Overwrite

Apple QuickTime PICT Remote Memory Overwrite by Piotr Bania [email protected] http://pb.specialised.info All rights reserved. CVE-ID: CVE-2005-2756 Original location: http://pb.specialised.info/all/adv/quicktime-pict-adv.txt Severity: Critical - remote code execution. Software affected:...

Fedora Core 3 : libungif-4.1.3-1.fc3.2 (2005-1045)

The libungif package contains a shared library of functions for loading and saving GIF format image files. The libungif library can load any GIF file, but it will save GIFs only in uncompressed format; it will not use the patented LZW compression used to save 'normal' compressed GIF files. A bug...

CVE-2005-3494

CVE-2005-3494 describes a cross-site scripting (XSS) flaw in Ar-blog versions 5.2 and earlier. The vulnerability allows a remote attacker to inject arbitrary web script or HTML through a blog comment, potentially compromising user sessions or displaying malicious content. The connected documents ...

CVE-2005-3497

CVE-2005-3497 describes a SQL injection in PHP Handicapper’s process_signup.php via the serviceid parameter. Affected software is PHP Handicapper; vulnerability is in the server-side handling of the serviceid input, enabling remote attackers to execute arbitrary SQL commands. The issue was initia...

CVE-2005-3489

CVE-2005-3489 : Buffer overflow in Asus Video Security 3.5.0.0 and earlier when using authorization allows remote attackers to execute arbitrary code via a long username/password string. The issue is triggered through crafted login data over the network (no authentication interaction required). A...

RHEL 2.1 / 3 / 4 : wget (RHSA-2005:812)

Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A stack based buffer overflow bug was found ...

CVE-2005-3492

CVE-2005-3492 affects FlatFrag 0.3 and earlier. The issue is a denial of service caused by a remote attacker sending an NT_CONN_OK command from a client that is not connected, triggering a null dereference. The documented impact is a crash. The Connected documents do not provide additional exploi...

Fixed in Apache Tomcat 5.5.13, 5.0.SVN

Low: Directory listing CVE-2006-3835 This is expected behaviour when directory listings are enabled. The semicolon ; is the separator for path parameters so inserting one before a file name changes the request into a request for a directory with a path parameter. If directory listings are enabled...

CVE-2005-2974

CVE-2005-2974 affects the giflib/libungif GIF decoder. Several connected advisories (Red Hat RHSA-2009:0444, Oracle/ELSA-2009-0444, CentOS/CESA-2009:0444, SUSE SLES9, Scientific Linux) document that specially crafted GIF images could cause a crash and, in some reports, potentially allow arbitrary...

Fedora Core 4 : libungif-4.1.3-3.fc4.2 (2005-1046)

The libungif package contains a shared library of functions for loading and saving GIF format image files. The libungif library can load any GIF file, but it will save GIFs only in uncompressed format; it will not use the patented LZW compression used to save 'normal' compressed GIF files. A bug...

CVE-2005-3350

CVE-2005-3350 is a vulnerability in the giflib/libungif GIF decoder (libungif before 4.1.0) that can lead to an out-of-bounds write and memory corruption when processing a crafted GIF file. Multiple connected sources confirm two CVEs associated with this issue: CVE-2005-2974 and CVE-2005-3350, wi...

RHEL 2.1 / 3 / 4 : libungif (RHSA-2005:828)

Updated libungif packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libungif package contains a shared library of functions for loading and saving GIF format image files. Several bugs i...

RHEL 3 / 4 : curl (RHSA-2005:807)

Updated curl packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of the supported protocols. A stack...

Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

CVE-2005-3487

Multiple buffer overflows in Scorched 3D 39.1 bf and earlier allow remote attackers to execute arbitrary code via various 1 GLConsole::addLine, 2 ServerCommon::sendString, 3 ServerCommon::serverLog functions, 4 a long command that is not properly handled in ComsMessageHandler.cpp when generating ...

CVE-2005-3487

Multiple buffer overflows in Scorched 3D 39.1 bf and earlier allow remote attackers to execute arbitrary code via various 1 GLConsole::addLine, 2 ServerCommon::sendString, 3 ServerCommon::serverLog functions, 4 a long command that is not properly handled in ComsMessageHandler.cpp when generating ...