CVE-2005-3372

The CVE-2005-3372 entry concerns eTrust CA 7.0.1.4 (11.9.1 engine). The vulnerability arises from a magic byte bug: files with an unsuspecting extension (e.g., BAT, HTML, EML) containing an MZ EXE-like signature are treated as safe types but can still execute as dangerous content. This bypasses v...

CVE-2005-3376

The CVE-2005-3376 issue affects Kaspersky (version 5.0.372). It arises from a multiple interpretation error where a file containing BAT, HTML, or EML data with an MZ (EXE) magic byte is misclassified as a safe type, allowing it to be treated as non-executable by the scanner yet potentially execut...

CVE-2005-3371

The CVE-2005-3371 entry describes a vulnerability in AVG 7.0.323 labeled the “magic byte bug.” A multiple interpretation error occurs when scanning files like BAT, HTML, and EML that start with an MZ (EXE) signature, causing such files to be treated as safe type yet still executable by end-system...

CVE-2005-3363

The CVE-2005-3363 issue is an SQL injection in Saphp Lesson (likely versions Lesson1.1 and Lesson2.0) that lets remote attackers inject arbitrary SQL via the forumid parameter in showcat.php and add.php. The description implies network access with low attack complexity and no authentication, with...

CVE-2005-3370

Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be...

CVE-2005-3385

The CVE-2005-3385 entry describes a SQL injection vulnerability in Techno Dreams Mailing List script that allows remote attackers to execute arbitrary SQL and bypass authentication via the userid parameter in admin/login.asp. Affected component: the Mailing List script; vulnerability type: SQL in...

CVE-2005-3374

Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangero...

CVE-2005-3373

The CVE-2005-3373 entry describes a vulnerability in Dr.Web 4.32b where an interpretation error in the virus scanner allows a crafted file (e.g., BAT, HTML, or EML) containing an MZ magic byte sequence (normally for EXE) to be treated as a safe type, yet still be executable as a dangerous file by...

CVE-2005-3362

...

CVE-2005-3361

XSS in FlatNuke 2.5.6: forum/index.php vulnerable to script injection via the nome parameter in login operation. Remote attacker could inject arbitrary script/HTML. No remediation details provided in the documents.

CVE-2005-3362

This CVE entry is rejected/not used; refer to CVE-2005-3153.

CVE-2005-2930

Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...

CVE-2005-2930

Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...

CVE-2005-3362

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3153. Reason: This candidate is a reservation duplicate of CVE-2005-3153. Notes: All CVE users should reference CVE-2005-3153 instead of this candidate. All references and descriptions in this candidate have been removed to...

[SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 878-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 878-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2930

Summary: CVE-2005-2930 is a stack-based buffer overflow in chmlib’s _chm_find_in_PMGL, affecting chmlib and apps like KchmViewer. Exploitation could allow arbitrary code execution via crafted CHM files. The vulnerability is documented alongside CVE-2005-2659 and CVE-2005-3318 by Debian and Gentoo...

fetchmail, fetchmailconf security update

CentOS Errata and Security Advisory CESA-2005:823-01 Updated fetchmail packages that fix insecure configuration file creation is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding...