Fedora Core 3 : mozilla-1.7.10-1.3.2 (2005-874)

An updated mozilla package that fixes a security bug is now available for Fedora Core 3. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor...

arc insecure temporary file creation

arc insecure temporary file creation Vendor: http://arc.sourceforge.net/ Advisory: http://www.zataz.net/adviso/arc-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. The temporary fil...

Fedora Core 3 : util-linux-2.12a-24.5 (2005-886)

Wed Sep 14 2005 Karel Zak 2.12a-24.5 - fix 168207 - CVE-2005-2876 umount unsafe -r usage Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Core 3 : openssh-3.9p1-8.0.3 (2005-858)

This security update fixes CVE-2005-2798 and resolves a problem with X forwarding binding only on IPv6 address on certain circumstances. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

CVE-2005-2954

SQL injection vulnerability in passwordreminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field...

CVE-2005-2949

pamperuser before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which allows remote attackers or local users to login as other users by using certain applications that allow the username to be changed during authentication, such ...

CVE-2005-2948

KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are not all killed by KillProcess...

CVE-2005-2946

CVE-2005-2946 is a vulnerability in OpenSSL where the default MD5-based digest was used for certificate signatures in versions prior to 0.9.8, enabling remote attackers to forge certificates with a valid CA signature. OpenSSL advisories (and OSS/vendor alerts in connected documents) reference bac...

CVE-2005-2955

ATutor 1.5.1 (and possibly earlier) is affected by CVE-2005-2955 due to an incomplete blacklist in config.inc.php that fails to block dangerous file extensions during upload, allowing authenticated administrators/educators to execute arbitrary code by uploading files with extensions like .inc or ...

CVE-2005-2957

The CVE describes a stack-based buffer overflow in Avira Desktop for Windows (version 1.00.00.68) when using AVPACK32.DLL 6.31.0.3 during ACE archive scanning. A long filename inside an ACE archive can cause the overflow, allowing a remote attacker to execute arbitrary code on a vulnerable host. ...

CVE-2005-2877

CVE-2005-2877 affects TWiki’s revision control function. If the rev parameter in TWikiUsers is not sanitized, remote attackers can inject shell metacharacters to execute arbitrary commands on the server. Public details describe the flaw in TWiki prior to 02-Sep-2004 and indicate the issue stems f...

CVE-2005-2949

The CVE-2005-2949 entry concerns the PAM module pam_per_user prior to version 0.4. The issue is that it does not verify if the user name changes between authentication attempts and reuses the same subrequest handle, enabling attack scenarios where an attacker (remote or local) could log in as ano...

CVE-2005-2944

The CVE-2005-2944 entry applies to GNOME Workstation Command Center (gwcc) 0.9.6 and earlier. The vulnerability arises in perform_file_save, where a symlink attack on the temporary file gwcc_out.txt enables local users to create and overwrite arbitrary files. The NVD entry lists a local attack ve...

CVE-2005-2952

The CVE-2005-2952 entry concerns a directory traversal vulnerability in Subscribe Me Pro (versions up to 2.044.09P and earlier). The issue arises from a dot-dot (.. ) path traversal in the l parameter of s.pl, allowing remote attackers to read arbitrary files. Affects Subscribe Me Pro 2.044.09P a...

CVE-2005-2949

pamperuser before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which allows remote attackers or local users to login as other users by using certain applications that allow the username to be changed during authentication, such ...

CVE-2005-2657

CVE-2005-2657 affects common-lisp-controller up to version 4.18. A local user can cause code to be compiled into a cache directory and later executed by another user who has not run Common Lisp, enabling privilege escalation. Debian/DSA advisories document this as a design error and provide fixed...

CVE-2005-2956

ATutor 1.5.1 (and possibly earlier) stores temporary chat logs under the web document root with insufficient access control and predictable filenames, allowing remote attackers to obtain user chat conversations via direct requests to those files. This CVE entry contains the core detail; no exploi...

CVE-2005-2657

Removed by vendor...

CVE-2005-2954

CVE-2005-2954 corresponds to an SQL injection vulnerability in ATutor’s password_reminder.php, exploitable via the email field and affecting ATutor prior to 1.5.1 pl1. The issue is described as an input validation flaw in the remote version of ATutor, enabling attackers to manipulate SQL queries....

CVE-2005-2945

CVE-2005-2945 affects the ARC archive utility (and ARC-derived ARC/ARCC variants) in Unix-like systems: ARC creates temporary files with world-readable permissions, allowing local users to read sensitive information. Related CVE-2005-2992 describes a symlink-based flaw that also involves insecure...