CVE-2005-2992

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

CVE-2005-1985

Summary : CVE-2005-1985 describes a remote code execution vulnerability in the Microsoft Windows Client Service for NetWare (CSNW/Gateway Service for NetWare). Affected products/versions : Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 and earlier, where CSNW is installed (by d...

CVE-2005-1987

CVE-2005-1987 is a remote code execution vulnerability in Microsoft Collaboration Data Objects (CDO) used by CDOSYS/CDOEX on Windows and Exchange. An unchecked buffer triggered by processing a malformed SMTP/email header (e.g., oversized Content-Type) can allow an attacker to execute arbitrary co...

[SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability

SEC-1 LTD. www.sec-1.com Security Advisory Advisory Name: Collaboration Data Objects Buffer Overflow Vulnerability Application: Multiple Applications that implement CDO Platform: Windows 2000 All versions Windows XP All versions inc sp2 Windows Server 2003 All versions Exchange 2000 Server Servic...

[Full-disclosure] iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability

Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.13.05 www.idefense.com/application/poi/display?id=322&type=vulnerabilities October 13, 2005 I. BACKGROUND GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the mos...

Immunity Canvas: NETBACKUP_JAVAUI

Name| netbackupjavaui ---|--- CVE| CVE-2005-2715 Exploit Pack| CANVAS Description| VERITAS NetBackup Java User Interface Format String Notes| CVE Name: CVE-2005-2715 VENDOR: Symantec VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-05-001.html CVE Url:...

CVE-2005-2925

runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin...

CVE-2005-1978

COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code...

CVE-2005-1979

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service MSDTC service exception and exit via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol TIP functionality...

CVE-2005-2965

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4802, CVE-2005-4803. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2005-4802 and CVE-2005-4803 to determi...

BELL-CVE-2005-3180 CVE-2005-3180 does not affect BellSoft software

Bulletin has no description...

CVE-2005-3179

drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information...

CVE-2005-3183

CVE-2005-3183 – affected software: w3c-libwww (HTBoundary_put_block in HTBound.c). Root cause/impact: remote servers can induce a denial of service (segmentation fault) by sending a crafted multipart/byteranges MIME message that triggers an out-of-bounds read. This matches the description in the ...

CVE-2005-2942

...

CVE-2005-2942

CVE-2005-2942 is rejected/not used; this candidate was revoked by the CNA.

CVE-2005-2715

CVE-2005-2715 involves a format-string vulnerability in VERITAS NetBackup Java Authentication Service (bpjava-msvc) daemon. The flaw affects NetBackup components listed in the description (e.g., 4.5FP/4.5MP and 5.0–6.0 families) and allows remote code execution via the COMMAND_LOGON_TO_MSERVER co...

[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 863-1 [email protected] http://www.debian.org/security/ Martin Schulze October 12th, 2005 http://www.debian.org/security/faq -...

openssl, openssl095a, openssl096 security update

CentOS Errata and Security Advisory CESA-2005:800-01 Updated OpenSSL packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v...

losetup, mount, util security update

CentOS Errata and Security Advisory CESA-2005:782-01 Updated util-linux and mount packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large variety of...