CVE-2005-2981

CVE-2005-2981 describes a cross-site scripting (XSS) vulnerability in Orion versions 1.3.8 and 1.4.5 . The issue arises from user-supplied input in the URL not being properly quoted in the resulting 404 error page, enabling an attacker to inject arbitrary script/HTML. The core vulnerability is th...

CVE-2005-2989

DeluxeBB 1.0 and 1.0.5 contain multiple SQL injection vulnerabilities exploitable via user-controlled parameters: tid in topic.php, uid in misc.php or pm.php, and fid in forums.php or newpost.php. These allow remote attackers to inject arbitrary SQL commands, as described in CVE-2005-2989. The ev...

CVE-2005-2986

The CVE-2005-2986 entry concerns the v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, and V3Net for Windows Server 6.0 Build 6.0.0.383. The vulnerability is that the driver does not properly validate the source of DeviceIoControl commands, enabling remo...

CVE-2005-2986

The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges...

CVE-2005-2982

CVE-2005-2982 describes a cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 . The issue arises because a URL is not properly quoted in the server’s 404 error page , allowing a remote attacker to inject arbitrary web script or HTML. The description explicitly ties the vulnerability ...

CVE-2005-2990

CVE-2005-2990 affects the LineContol Java Client (jlc) component, where the AuthInfo.java code path in versions before 0.8.1 logs sensitive data such as user passwords. The documented impact is partial confidentiality loss. No exploitation details are provided in the sources; no explicit remediat...

CVE-2005-2987

The CVE-2005-2987 issue affects Digital Scribe login.php (version 1.4). The vulnerability is an SQL injection through the login.php username parameter, enabling remote attackers to manipulate database queries and potentially bypass authentication or alter data. Multiple security databases corrobo...

Discuz! <= 4.0.0 rc4 Arbitrary File Upload

The remote host is using Discuz!, a popular web application forum in China. According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. An attacker may be able to exploit this issue to execute arbitrary commands on th...

Fedora Core 3 : httpd-2.0.53-3.3 (2005-848)

This update includes two security fixes. An issue was discovered in modssl where 'SSLVerifyClient require' would not be honoured in location context if the virtual host had 'SSLVerifyClient optional' configured CVE-2005-2700. An issue was discovered in memory consumption of the byterange filter f...

RHEL 2.1 : mod_ssl (RHSA-2005:773)

An updated modssl package for Apache that corrects a security issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and...

Solaris 10 (x86) : 120665-01

SunOS 5.10x86: tl driver patch. Date this patch was last updated by Sun : Sep/15/05 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Fedora Core 3 : xorg-x11-6.8.2-1.FC3.45 (2005-893)

Updated xorg-x11 packages that fix several integer overflows, various bugs, are now available for Fedora Core 3. X.Org X11 is an implementation of the X Window System, which provides the core functionality for the Linux graphical desktop. Several integer overflow bugs were found in the way X.Org...

Fedora Core 4 : httpd-2.0.54-10.2 (2005-849)

This update includes two security fixes. An issue was discovered in modssl where 'SSLVerifyClient require' would not be honoured in location context if the virtual host had 'SSLVerifyClient optional' configured CVE-2005-2700. An issue was discovered in memory consumption of the byterange filter f...

Fedora Core 3 : ntp-4.2.0.a.20040617-5.FC3 (2005-812)

When starting xntpd with the -u option and specifying the group by using a string not a numeric gid the daemon uses the gid of the user not the group. This problem is now fixed by this update. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2496 to this issue. Note tha...

Fedora Core 4 : firefox-1.0.6-1.2.fc4 (2005-871)

An updated firefox package that fixes as security bug is now available for Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox processes certain...

RHEL 3 : XFree86 (RHSA-2005:501)

Updated XFree86 packages that fix several integer overflows, various bugs, and add ATI RN50/ES1000 support are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of the X...

Fedora Core 3 : firefox-1.0.6-1.2.fc3 (2005-872)

An updated firefox package that fixes as security bug is now available for Fedora Core 3 and Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox process...

RHEL 4 : squid (RHSA-2005:766)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:766 advisory. Squid is a full-featured Web proxy cache. A bug was found in the way Squid displays error messages. A remote attacker could submit a request...

Fedora Core 4 : dbus-0.33-3.fc4.1 (2005-822)

Mon Aug 29 2005 John J5 Palmieri - 0.33-3.fc4.1 - add patch from 0.2x series that fixes an exploit where users can attach to another user's session bus CVE-2005-0201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Solaris 10 (sparc) : 120664-01

SunOS 5.10: tl driver patch. Date this patch was last updated by Sun : Sep/13/05 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...