CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

CVE-2005-3302

CVE-2005-3302 is an eval-injection vulnerability in Blender 2.36 (bvh_import.py) that lets an attacker execute arbitrary Python code via a hierarchy element in a .bvh file fed to an eval(). The issue arises from missing input validation in the Blender importer. Impact described in sources include...

CVE-2005-3301

phpMyAdmin prior to 2.6.4-pl3 contains multiple cross-site scripting (XSS) vulnerabilities (notably CVE-2005-3301) exploitable via left.php, queryframe.php, and server_databases.php. Some issues also involve unsafe handling in grab_globals.php (CVE-2005-3300) and related cookie/login error-page p...

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

SUSE-SA:2005:016: Mozilla Firefox

The remote host is missing the patch for the advisory SUSE-SA:2005:016 Mozilla Firefox. This security update for Mozilla Firefox fixes following problems: - CVE-2005-0231: 'Fire tabbing' The javascript security manager usually prevents that a javascript: URL from one host is opened in a window...

Fedora Core 3 : kernel-2.6.12-1.1380_FC3 (2005-1007)

This update fixes the outstanding kernel security issues for FC3, and fixes a number of regressions in the previous update kernel. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora Core 4 : kernel-2.6.13-1.1532_FC4 (2005-1013)

Wed Oct 19 2005 Dave Jones 2.6.13-1.1532FC4 - Fix CVE-2005-2973 ipv6 infinite loop - Disable ACPI burst again, it's still problematic. - Update to the final upstream variant of the IDE/SATA fix. - Sun Oct 16 2005 Dave Jones 2.6.13-1.1531FC4 - Stop IDE claiming legacy ports before libata in...

GLSA-200510-18 : Netpbm: Buffer overflow in pnmtopng

The remote host is affected by the vulnerability described in GLSA-200510-18 Netpbm: Buffer overflow in pnmtopng RedHat reported that pnmtopng is vulnerable to a buffer overflow. Impact : An attacker could craft a malicious PNM file and entice a user to run pnmtopng on it, potentially resulting i...

Fedora Core 3 : squid-2.5.STABLE11-3.FC3 (2005-1010)

Thu Oct 20 2005 Martin Stransky 7:2.5.STABLE11-3.FC3 - fix for 171213 - CVE-2005-3258 Squid crash due to malformed FTP response - more fixes from upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2005-3300

The registerglobals emulation layer in grabglobals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use...

CVE-2005-3294

Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service crash by sending multiple RETR commands. NOTE: it was later reported that 1.10 is also affected...

CVE-2005-3299

PHP file inclusion vulnerability in grabglobals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $redirect parameter, possibly involving the subform array...

CVE-2005-3299

PHP file inclusion vulnerability in grabglobals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $redirect parameter, possibly involving the subform array...

CVE-2005-3266

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3265. Reason: this candidate is a duplicate of CVE-2005-3265; after initial reservation, the requester discovered that they had the same cause. Notes: All CVE users should reference CVE-2005-3265 instead of this candidate. Al...

CVE-2005-2972

Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers to execute arbitrary code via an RTF file with long identifiers, which are not properly handled in the 1 ParseLevelText, 2 getCharsInsideBrace, 3 HandleLists, 4 or 5 HandleAbiLis...

CVE-2005-3278

Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer BMV 1.2 allows local users to execute arbitrary code via a PostScript PS file containing a large number of pages value, which leads to a resultant buffer overflow...

CVE-2005-3292

Affected software: Xeobook 0.93. Vulnerability: multiple cross-site scripting (XSS) vulnerabilities enabling remote attackers to inject arbitrary web script or HTML via Javascript events in tags such as . Impact: script execution in the victim’s browser; no exploit details are provided in the doc...

CVE-2005-3297

CVE-2005-3297 affects OpenWBEM on SuSE Linux 9, with multiple integer overflows identified as the root cause. The vulnerability can allow remote attackers to execute arbitrary code via unknown vectors. The available documents confirm the affected product/component (OpenWBEM) and the platform (SuS...