CVE-2005-3270

The CVE-2005-3270 entry concerns Symantec Norton AntiVirus 9.0.3 and a DiskMountNotify component. The vulnerability is an untrusted search path that allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file. This is a local privilege escalation i...

CVE-2005-3261

getversions.php in versatileBulletinBoard vBB 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-3273

CVE-2005-3273 affects the ROSE (rose) packet router ioctl in the Linux kernel (ROSE code in rose_route.c) for 2.6 kernels before 2.6.12 and 2.4 before 2.4.29. The root cause is improper verification of the ndigis argument when creating a new route, which can trigger array out-of-bounds conditions...

CVE-2005-3276

CVE-2005-3276 affects the Linux 2.6 kernel: the sys_get_thread_area path in process.c may copy an uninitialized data structure to userspace, exposing kernel memory to a local user. Affected versions are 2.6 before 2.6.12.4 and 2.6.13. The impact is information disclosure of kernel data to untrust...

CVE-2005-3262

CVE-2005-3262 relates to a format string vulnerability in WinRAR (RARLAB) versions 2.90 through 3.50. The issue arises when WinRAR displays diagnostic errors for an invalid filename, where format string specifiers in a UUE/XXE file are not properly handled, allowing remote attackers to execute ar...

CVE-2005-2469

CVE-2005-2469: A stack-based buffer overflow affects the NMAP Agent for Novell NetMail, version 3.52C and possibly earlier. The vulnerability allows local users to execute arbitrary code by sending a long username in the USER command. The available documents confirm the vulnerability and affected...

CVE-2005-3258

CVE-2005-3258 affects Squid 2.5 STABLE11 and earlier, where the rfc1738_do_escape function in ftp.c can be triggered by certain FTP responses to cause a denial-of-service (segmentation fault). The connected advisories and scans consistently reference Squid updates to address this issue (e.g., Fed...

CVE-2005-3261

CVE-2005-3261 affects versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerability is in getversions.php, which unintentionally lists the versions of all installed scripts and can be triggered by a direct remote request. This leads to information disclosure of installed components. The provided docu...

CVE-2005-3268

CVE-2005-3268 concerns yiff server (yiff-server) 2.14.2 on Debian GNU/Linux. The vulnerability arises because the process runs as root and does not properly verify ownership of files it opens, enabling local users to read arbitrary files. The connected documents confirm the affected product/versi...

CVE-2005-3271

CVE-2005-3271 affects the Linux kernel 2.6 series. Description and multiple advisories (SUSE, Debian, Mandriva) show exec() does not properly clear posix-timers in multi-threaded environments, causing a resource leak. This can enable a large number of local users to cause a denial of service by e...

CVE-2005-3121

The CVE-2005-3121 issue affects module-assistant prior to version 0.9.10. A rule file used by this tool creates a temporary file insecurely, enabling local users to perform unauthorized operations. Public advisories (DSA-867-1) from Debian and related OpenVAS/NVD entries corroborate the local-fil...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

CVE-2005-3262

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename...

CVE-2005-3269

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for 1 Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, 2 Red Hat Directory Server and 3 Certificate Server before 7.1 SP1, 4 Sun ONE Directory Server 5.1 SP4 and earlier, and 5 Sun ONE Administration Serv...

CVE-2005-3259

The CVE-2005-3259 entry concerns multiple SQL injection flaws in versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerabilities affect several entry points and query parameters (including login, “search this thread,” “search for posts,” “forgot password,” and various index.php parameters such as lis...

CVE-2005-3260

CVE-2005-3260 describes multiple XSS flaws in versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via the url parameter in dereferrer.php and the file parameter in imagewin.php. The NVD entry lists a MEDIUM base score (CVSS2: AV:N/AC:...

CVE-2005-3184

CVE-2005-3184 : A buffer overflow in the Unicode-to-bytes conversion in the SRVLOC dissector of Ethereal (packet-srvloc.c) can be triggered by a crafted srvloc packet with a modified length, enabling remote code execution. Affected product: Ethereal 0.10.x prior to the security fixes. The public ...

CVE-2005-2759

CVE-2005-2759 (LiveUpdate) and CVE-2005-3270 (DiskMountNotify) describe local privilege escalation in Symantec Norton AntiVirus for Macintosh 9.0.3. The illustrations show that the jlucaller binary (LiveUpdate) and DiskMountNotify are setuid root and rely on user-supplied input or PATH handling t...

CVE-2005-2971

CVE-2005-2971 : Heap-based buffer overflow in the KWord RTF importer of KOffice 1.2.0–1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file. Root cause: buffer overflow in the importer. Affected software is the KWord component of KOffice; multiple advisories (e.g., Debian...