CVE-2005-3278

CVE-2005-3278 describes an integer overflow in the openpsfile function (gsinterf.c) of Jan Kybic BitMap Viewer (BMV) 1.2 that can allow local code execution via a specially crafted PostScript file with a large number of pages, causing a buffer overflow. Public references across Debian advisories ...

CVE-2005-3279

CVE-2005-3279 reports a stack-based buffer overflow in the vgasco_printf function of Jan Kybic BitMap Viewer (BMV) 1.2 when built with M_UNIX and run setuid. A long filename passed via the -b option can overflow the stack and allow local privilege escalation. Affected: BMV 1.2 (vgasco_printf). Ro...

CVE-2005-3299

PHP file inclusion vulnerability in grabglobals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $redirect parameter, possibly involving the subform array. Recent assessments: litonhh1 at November 03, 2022 5:05pm UTC reported: nmap —script exploit...

CVE-2005-3277

CVE-2005-3277 documents a remote command-execution vulnerability in HP-UX LPD where shell metacharacters in a crafted request trigger code execution, affecting HP-UX 10.20 and 11.11 (11i) and earlier. The issue is tied to error-path handling and is explicitly noted as distinct from CVE-2002-1473....

CVE-2005-2117

CVE-2005-2117 refers to a remote code execution vulnerability in the Windows Shell Web View script injection. The issue arises in Web View in Windows Explorer when previewing files, where certain HTML characters in preview fields can be crafted to execute arbitrary code on affected systems. Affec...

CVE-2005-2118

Summary (CVE-2005-2118 / CVE-2005-2122) : Both vulnerabilities stem from how Windows Shell handles .lnk shortcut files, enabling remote code execution through crafted shortcuts or properties. Affected products include Windows 2000 SP4, XP SP1/SP2, and Windows Server 2003. The issues differ in the...

CVE-2005-2122

CVE-2005-2122 corresponds to a Windows Shell buffer overflow in the handling of .lnk shortcut files, enabling remote code execution when a user opens a specially crafted shortcut or properties dialog. The issue affects Windows 2000 SP4, XP SP1/SP2, and Windows Server 2003, and is part of the MS05...

CVE-2005-3275

The NAT code 1 ipnatprototcp.c and 2 ipnatprotoudp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service memory corruption by causing two packets for the same protocol to be NATed at t...

BELL-CVE-2005-3272 CVE-2005-3272 does not affect BellSoft software

Bulletin has no description...

KLA10410 ACE vulnerability in ZipGenius

Buffer overflows were found in ZipGenius. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed ZIP & ACE archives or UUE, XXE or MIM files with specially designed filenames. Original advisories...

Oracle Database Server buffer overflow in Security Component

Overview The Oracle Database Server Security Component contains a buffer overflow. Exploitation may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description A lack of input validation in the Oracle Database Server Security Component may allow a buffer...

[Full-disclosure] UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow Advisory number: SCOSA-2005.41 Issue date: 2005 October 20 Cross reference: sr894991 fz532994 erg712940 CAN-2005-2927 1. Problem Description iDEFENSE has identified a...

CVE-2005-3268

yiff server yiff-server 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files...

CVE-2005-3121

A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

CVE-2005-3261

getversions.php in versatileBulletinBoard vBB 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-3182

CVE-2005-3182 : A buffer overflow in the HTTP management interface of GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code by sending overly long HTTP headers (notably Host and Accept ). The issue is described as occurring in the web/HTTP management component, with the vendor no...

CVE-2005-3274

Race condition in ipvsconnflush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service null dereference by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is...

CVE-2005-3264

Zeroblog is affected by a Cross-Site Scripting (XSS) vulnerability in thread.php via the threadID parameter, observed in Zeroblog 1.1f and 1.2a. The issue is caused by insufficient input sanitization on threadID, allowing arbitrary web script or HTML to be injected by a remote attacker. Connected...

CVE-2005-3269

This CVE affects multiple directory server products via a stack-based buffer overflow in help.cgi in the HTTP administrative interface, allowing remote attackers to cause a denial of service or, for local users, gain root privileges. Affected are Sun Java System Directory Server 5.2 (2003Q4, 2004...