CVE-2005-2957

Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive...

CVE-2005-2947

CVE-2005-2947 describes a buffer overflow in KillProcess version 2.20 and earlier, triggered by an executable file containing a long FileDescription in the version resource. The vulnerability can allow user‑assisted attackers to execute arbitrary code. The provided connected documents do not spec...

CVE-2005-2953

CVE-2005-2953 is an XSS vulnerability in MIVA Merchant 5, specifically in merchant.mvc, allowing remote attackers to inject arbitrary script/HTML via the Customer_Login parameter. The description from NVD confirms the affected product and the vulnerable parameter; no remediation details are provi...

CVE-2005-2951

CVE-2005-2951 affects AzDGDatingLite 2.1.3 (and possibly earlier) with a directory traversal flaw in security.inc.php. The vulnerability allows an attacker to craft the l parameter (using .. and a trailing null byte via %00) that is used in an include_once statement, enabling remote execution of...

CVE-2005-2948

Technical details about CVE-2005-2948 are not publicly provided in the available connected documents. Monitor for updates.

[VulnWatch] ncompress insecure temporary file creation

ncompress insecure temporary file creation Vendor: ftp://ftp.leo.org/pub/comp/os/unix/linux/sunsite/utils/compress/ Advisory: http://www.zataz.net/adviso/ncompress-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary...

Immunity Canvas: LINKSYS_APPLY_CGI

Name| linksysapplycgi ---|--- CVE| CVE-2005-2799 Exploit Pack| CANVAS Description| linksysapplycgi Notes| References: http://www.idefense.com/application/poi/display?id=305&type=vulnerabilities CVE Name: CVE-2005-2799 VENDOR: Linksys Date public: Sep 13, 2005 CVE Url:...

squid security update

CentOS Errata and Security Advisory CESA-2005:766 An updated Squid package that fixes security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid...

Important: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix several integer overflows, various bugs, and add ATI RN50/ES1000 support are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of the X...

[SECURITY] [DSA 812-1] New turqstat packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 812-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2658

Turquoise SuperStat (turqstat) up to version 2.2.4 is affected by a buffer overflow in utility.cpp that can allow remote NNTP servers to execute arbitrary code when a date with a long month is processed. Public advisories (Debian DSA-812-1) document the remote overflow and provide fixed package v...

CVE-2005-2935

The CVE-2005-2935 entry covers an Unquoted Windows search path vulnerability in Microsoft AntiSpyware (AntispywareMain.exe) that could allow local code execution by placing a malicious c:\program.exe. The issue stems from an unquoted search path when AntiSpyware attempts to execute gsasDtServ.exe...

CVE-2005-2918

gtkdiskfree (versions 1.9.3 and earlier) is affected by CAN-2005-2918/CVE-2005-2918 due to insecure creation of a temporary file, enabling local attackers to overwrite arbitrary files via a symlink attack. Impact is local access with the user’s privileges; no remote code execution is indicated in...

CVE-2005-2495

CVE-2005-2495 concerns multiple integer overflows in XFree86 before 4.3.0 that could enable a user-assisted attacker to execute arbitrary code via a crafted pixmap image. The provided connected documents do not supply additional technical details such as affected vendor/product versions beyond th...

CVE-2005-2799

CVE-2005-2799 is a buffer overflow in Linksys WRT54G/WRT54GS apply.cgi that enables remote code execution via a long HTTP POST. Affected firmware includes 3.01.03, 3.03.6 and other versions before 4.20.7. Public exploitation modules exist (e.g., Metasploit) for apply.cgi on WRT54G/WRT54GL/WRT54GS...

CVE-2005-2913

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2799. Reason: This candidate is a duplicate of CVE-2005-2799. Notes: All CVE users should reference CVE-2005-2799 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2883

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2855. Reason: This candidate is a duplicate of CVE-2005-2855. Notes: All CVE users should reference CVE-2005-2855 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2901

Multiple Cross-site scripting XSS vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 message, or 3 ip parameter to thankyou.php or 4 emsg parameter to web2mail.php...

CVE-2005-2880

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the 1 login field in login.php or 2 LocationID parameter to week.php...

CVE-2005-2899

Multiple cross-site scripting XSS vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 date, 2 time, 3 name, 4 ip, 5 agent, or 6 msg parameter...