CVE-2005-3108

mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a certain memory map that causes the iounmap to perform a lookup of a page that does not exist...

BELL-CVE-2005-3107 CVE-2005-3107 does not affect BellSoft software

Bulletin has no description...

CVE-2005-3111

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack...

[SECURITY] [DSA 829-1] New mysql packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 829-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 809-2] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-2 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 809-2] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-2 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3112

CVE-2005-3112 affects Macromedia Breeze 5.0: the reset password feature stores passwords in plaintext in the database instead of hashing. This allows anyone with database access to obtain user passwords. The provided documents do not specify exploit details, affected versions beyond Breeze 5.0, o...

CVE-2005-3111

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack...

CVE-2005-3108

CVE-2005-3108 affects the Linux kernel 2.6 on AMD64 (and a bug in the ioremap() path). Local users could trigger a denial of service or information leak by performing an ioremap on a memory map and causing iounmap to look up a non-existent page. Public advisories from Debian, Ubuntu, Red Hat/Cent...

CVE-2005-3107

CVE-2005-3107 affects the Linux kernel 2.6 family, where a local attacker tracing a thread that shares the same memory map can cause a denial of service (deadlock) by forcing a core dump when the traced thread is in TASK_TRACED. Public advisories (e.g., RHSA-2006:0437, CESA-2006:0437) document th...

CVE-2005-3106

CVE-2005-3106 is a Linux kernel race condition affecting thread management when memory mappings are shared (CLONE_VM). The issue can lead to a local denial of service via deadlock, e.g., by triggering a core dump or waiting-for-exec scenarios. Connected advisories confirm this CVE across multiple...

CVE-2005-3060

CVE-2005-3060 affects IBM AIX getconf in AIX 5.2–5.3, due to a buffer overflow in the getconf utility. Exploitation would be local (authenticated) and may allow arbitrary code execution on the affected host. The CERT/IBM documentation identifies IBM as vendor and points to updates (IY73814, IY738...

CVE-2005-2917

The CVE-2005-2917 issue affects the Squid proxy server (2.5.STABLE10 and earlier) during NTLM authentication, where certain crafted request sequences can crash the daemon. Impact described in multiple advisories: a remote attacker could terminate the Squid process, causing a denial of service wit...

CVE-2005-2660

CVE-2005-2660 affects apachetop 0.12.5 and earlier. The vulnerability arises from insecure temporary file creation: atop.debug in the code path uses a fixed path and mode that allows a symlink attack to overwrite or create arbitrary files with the privileges of the user running apachetop. The Deb...

CVE-2005-2962

Removed by vendor...

CVE-2005-2962

The ntlmaps package is affected. The post-installation script for ntlmaps before version 0.9.9 changes the configuration file to world-readable, allowing local users to read the Windows NT username and password ntlmaps connects to. Debian advisories (DSA-830-1) state this has been fixed in 0.9.9-...

CVE-2005-3114

CVE-2005-3114 describes a buffer overflow in the NateOn Messenger ActiveX control (NateonDownloadManager.ocx) that allows remote attackers to crash the application and potentially execute arbitrary code via a long third argument to the GotNate.Excute method. The vulnerability affects the ActiveX ...

CVE-2005-3109

The CVE-2005-3109 entry affects the Linux 2.6 kernel HFS and HFS+ (hfsplus) modules. The issue allows a local attacker to cause a kernel oops/denial of service by mounting a filesystem that is not HFS/HFS+. Public disclosures in Debian (DSA-922-1) and Red Hat/CentOS advisories confirm this vulner...

CVE-2005-3113

CVE-2005-3113 affects NateOn Messenger: the ActiveX control NateonDownloadManager.ocx lets remote attackers set arguments to GotNate.Excute to download and run arbitrary programs. The impact is remote code execution on the vulnerable host; exploitation status and concrete mitigations are not deta...

CVE-2005-3115

CVE-2005-3115 affects mpeg-tools = media-video/mpeg-tools-1.5b-r2. No exploit details are provided beyond the local risk in the linked advisories; no mitigation beyond upgrading is described in the available documents.