pcre security update

CentOS Errata and Security Advisory CESA-2005:761 Updated pcre packages are now available to correct a security issue. This update has been rated as having moderate security impact by the Red Hat Security Response Team PCRE is a Perl-compatible regular expression library. An integer overflow flaw...

mod_ssl

New modssl packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix a security issue. If "SSLVerifyClient optional" was configured in the global section of the config file, it could improperly override "SSLVerifyClient require" in a per-location section. More details...

kcheckpass in kdebase

New kdebase packages are available for Slackware 10.0, 10.1, and -current to fix a security issue with the kcheckpass program. Earlier versions of Slackware are not affected. A flaw in the way the program creates lockfiles could allow a local attacker to gain root privileges. For more details abo...

[SECURITY] [DSA 804-1] New kdelibs packages fix backup file information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 804-1 [email protected] http://www.debian.org/security/ Martin Schulze September 8th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2843

Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass authentication via a direct request to adminmain.php...

CVE-2005-2860

Cross-site scripting XSS vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report...

CVE-2005-2851

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the 1 smb4k.tmp or 2 sudoers temporary files...

[SECURITY] [DSA 803-1] New Apache packages fix HTTP request smuggling

-------------------------------------------------------------------------- Debian Security Advisory DSA 803-1 [email protected] http://www.debian.org/security/ Martin Schulze September 8th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2848

Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

CVE-2005-2869

CVE-2005-2869 (and related CVEs 2005-3300, 2005-3301) affect phpMyAdmin prior to certain fixed releases. The core issue is multiple cross-site scripting vulnerabilities in phpMyAdmin’s web interface (notably in the error page and cookie-based login, and in related components) that allow remote at...

CVE-2005-2858

The CVE-2005-2858 issue affects Rediff Bol 7.0 via the Fetch.FetchContact.1 ActiveX control (Fetch.dll). The FullAddressBook method allows remote attackers to read the Windows Address Book, exposing contact information. Root cause is an unsafe FullAddressBook interface in the Fetch.FetchContact.1...

CVE-2005-2841

The CVE-2005-2841 issue targets Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions. A buffer overflow in this feature on specific IOS releases (12.2ZH/12.2ZL, 12.3/12.3T, 12.4/12.4T) allows remote attackers to cause a denial of service and potentially execute arbitrary code vi...

CVE-2005-2855

CVE-2005-2855 affects Unclassified NewsBoard 1.5.3 with a cross-site scripting (XSS) vulnerability in the description field. The issue allows remote attackers to inject arbitrary web script or HTML by supplying crafted content to that field, enabling client-side code execution in the context of t...

CVE-2005-2853

GuppY 4.5.3a and earlier versions are affected by multiple XSS vulnerabilities. The issues arise in the PHP-based GuppY CMS (printfaq.php) where unsafely handled input and HTTP header data (Referer, User-Agent) are not properly sanitized by error.php, enabling remote injection of arbitrary script...

CVE-2005-2856

CVE-2005-2856 describes a stack-based buffer overflow in the WinACE UNACEV2.DLL used by many products (e.g., ALZip, Total Commander, IZArc, BitZipper, UltimateZip, etc.). The flaw occurs when extracting an ACE archive with an overly long filename, allowing user-assisted attackers to execute arbit...

CVE-2005-2861

CVE-2005-2861 affects N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03. It is a cross-site scripting (XSS) vulnerability where the Server header in an HTTP response is directly injected into an HTML report, enabling remote attackers to inject arbitrary script/HTML. Th...

CVE-2005-2851

CVE-2005-2851 affects smb4k and related versions prior to 0.6.3, enabling local users to read sensitive files via a symlink attack on temporary files (smb4k.tmp, or sudoers/super.tab). The underlying issue is that Smb4K writes contents to a target file pointed to by an insecure pre-existing symli...

CVE-2005-2852

The CVE-2005-2852 issue affects the NetWare CIFS.NLM driver (Novell NetWare 6.5 SP2/SP3, 5.1, 6.0). The root cause, per connected docs, is a stack/driver buffer overflow in CIFS.NLM that can be triggered remotely by an incorrect password length, enabling a denial-of-service (ABEND) condition. The...

CVE-2005-2020

CVE-2005-2020 affects 3Com Network Supervisor 5.0.2. The vulnerability is a directory traversal flaw in the HTTP server on port 21700 caused by insufficient input sanitization, enabling an unauthenticated remote attacker to read arbitrary files on the target filesystem. Connected advisories confi...

CVE-2005-2863

OpenWebMail contains an XSS vulnerability CVE-2005-2863 in the openwebmail-main.pl script (sessionid parameter) affecting OpenWebMail 2.41. The flaw allows remote injection of arbitrary web script/HTML. NVD notes a CVSS v2 base score of 4.3 (Medium) with network access, no authentication, and par...