CVE-2005-3102

CVE-2005-4690 (Movable Type 3.16) : The Red Hat advisory describes that Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (e.g., HTML and images) by selecting an arbitrary directory as a blog’s top-level directory. This is s...

CVE-2005-3098

CVE-2005-3098 affects Qualcomm qpopper’s poppassd (qpopper 4.0.8). The -t (trace file) argument allows local users to modify arbitrary files and escalate privileges. Impact is local privilege escalation; exploitation details are not provided in the supplied documents. No remediation details are i...

CVE-2005-3090

Cross-site scripting XSS vulnerability in bugactiongrouppage.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when viewallbugpage.php is used to delete the bug, as identified by bug0006002, a...

CVE-2005-3094

CVE-2005-3094 concerns a vulnerable Avi Alkalay man-cgi script that allows remote attackers to execute arbitrary code through shell metacharacters in the topic parameter. The NVD entry rates this as HIGH (CVSS v2 base 7.5) with a network attack vector, low complexity, and no authentication requir...

Vulnerability in Scan Engine Software

//-------------------------------------- // Vulnerability in Scan Engine Software // Release Date : 2005-09-15 // Version: Currents may be all priors versions // Tested on: Windows 2000 SP2 & SP4 // Tested on: Windows 2000 Server SP4 // // Discovered by: fRoGGz, maew, shadok & mogwai // Credit to...

wget security update

CentOS Errata and Security Advisory CESA-2005:771-01 Updated wget package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

CVE-2005-3066

Cross-site scripting XSS vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

cups security update

CentOS Errata and Security Advisory CESA-2005:772 Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a...

Critical: Red Hat Security Advisory: HelixPlayer security update

An updated HelixPlayer package that fixes a string format issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A format string bug was discovered in the way HelixPlayer processes RealPix .rp...

CVE-2005-3071

CVE-2005-3071 describes an unspecified vulnerability in the Unix File System (UFS) on Solaris 8 and 9 that, when logging is enabled, allows local users to cause a denial of service (a soft hang) via certain write operations to UFS. The NVD entry lists a low overall risk (CVSS v2 base score 2.1) w...

CVE-2005-2710

CVE-2005-2710 is a format string vulnerability in RealNetworks RealPlayer and HelixPlayer. The flaw affects processing of RealPix (.rp) and RealText (.rt) files and can allow a remote attacker to execute arbitrary code in the user’s context via crafted files. Public advisories (RHSA-2005-762/788,...

CVE-2005-3072

CVE-2005-3072 corresponds to a SQL injection in Interchange that affects versions 4.9.3 up to 5.2.0, specifically via the forum/submit.html handling. The vulnerability allows remote attackers to execute arbitrary SQL commands; the exact injection vectors are not clearly described in the provided ...

CVE-2005-3064

CVE-2005-3064 affects MultiTheftAuto 0.5 patch 1 and earlier. The vulnerability arises because the client-priority verification when executing command 40 is insufficient, allowing remote attackers to modify or delete the message of the day (motd.txt). The available records consistently describe t...

CVE-2005-3062

CVE-2005-3062 describes a PHP remote file inclusion vulnerability in the index.php of AlstraSoft E-Friends 4.0 , exploitable via the mode parameter to allow remote attackers to execute arbitrary PHP code. The vulnerability is documented in multiple sources (NVD CVE entry) with a base score of 7.5...

CVE-2005-3077

Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service crash via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes in an about: URI...

CVE-2005-3069

CVE-2005-3069 affects HylaFAX (xferfaxstats) up to version 4.2.1 and earlier. Root cause: insecure creation of temporary files by xferfaxstats leading to a symlink attack on xferfax$$, allowing local users to overwrite arbitrary files (I:P, A:N). Impact: local privilege/impact on integrity of fil...

CVE-2005-3084

CVE-2005-3084 : Buffer overflow in the TIFF library used by the Photo Viewer for Sony PSP 2.0 firmware enables remote DoS via a crafted TIFF image. Affected software: PSP 2.0 Photo Viewer TIFF support. Exploitation details are not provided in the supplied documents. No remediation details are inc...

CVE-2005-3075

CVE-2005-3075 affects Zengaia before 0.2. It is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unknown vectors. The vulnerability is documented in multiple feeds (NVD, Red Hat advisory, CVE records). Impact is consistent with a high-severity ratin...

CVE-2005-3074

The CVE-2005-3074 issue affects rsyslogd in RSyslog, where a SQL injection flaw in the syslog message handling allows remote attackers to execute arbitrary SQL commands. The vulnerability is present in RSyslog versions before 1.0.1 and before 1.10.1. Root cause: improper handling of crafted syslo...