CVE-2005-3174

CVE-2005-3174 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The vulnerability allows a user to log on to the domain when their password has expired if the fully qualified domain name (FQDN) is exactly 8 characters long. Connected sources confirm the affected OS and condition bu...

CVE-2005-3163

Polipo

CVE-2005-3162

CVE-2005-3162 is a duplicate of CVE-2005-3160 per the description; the connected record CVE-2005-3160 details multiple SQL injection vulnerabilities in PHP-Fusion via photogallery.php (parameters: album and photo). No patch/version details are provided in the supplied documents. Exploitation stat...

CVE-2005-3158

PHP-Fusion

CVE-2005-3117

CVE-2005-3150 is a remote, format-string vulnerability in weex , a non-interactive FTP client. Unpatched systems could allow an attacker to execute arbitrary code with the user’s privileges. Public details come from Debian security advisories (DSA-855-1 / CAN-2005-3150) and Gentoo GLSA, which sta...

CVE-2005-3172

CVE-2005-3172 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4, where WideCharToMultiByte can mis-handle Japanese composite characters in the last position, potentially preventing null termination and leading to data corruption or a buffer overflow. The issue is rooted in the strin...

CubeCart < 3.0.4 Multiple Script XSS

The remote version of CubeCart contains several cross-site scripting vulnerabilities due to its failure to properly sanitize user-supplied input of certain variables to the 'index.php' and 'cart.php' scripts. %NASLMINLEVEL 70300 Josh Zlatin-Amishav This script is released under the GNU GPLv2...

Polipo < 0.9.9 Unspecified Traversal Arbitrary File Access

The remote host is running the Polipo caching web proxy. In addition to caching web pages, the software also functions as a web server for providing access to documentation, cached pages, etc. The built-in web server in the installed version of Polipo fails to filter directory traversal sequences...

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...

CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2005-0023

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed...

CVE-2005-2966

The Python SVG import plugin diasvgimport.py for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a crafted SVG file...

CVE-2005-3148

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links 1 that are backed up by storeBackup.pl, or 2 recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership...

binutils security update

CentOS Errata and Security Advisory CESA-2005:673 An updated binutils package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the...

net security update

CentOS Errata and Security Advisory CESA-2005:395 Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used f...

slocate security update

CentOS Errata and Security Advisory CESA-2005:346 An updated slocate package that fixes a denial of service and various bugs is available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate,...

Low: Red Hat Security Advisory: binutils security update

An updated binutils package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were fou...