BELL-CVE-2005-2800 CVE-2005-2800 does not affect BellSoft software

Bulletin has no description...

CVE-2005-2802

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2872, CVE-2005-2873. Reason: this candidate's description originally combined two separate issues. Notes: All CVE users should consult CVE-2005-2872 and CVE-2005-2873 to determine the appropriate identifier for the issue...

DEBIAN-CVE-2005-2797

OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding "-D" option when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality...

Low: Red Hat Security Advisory: cvs security update

An updated cvs package that fixes a security bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. An insecure temporary file usage was found in the cvsbug program. It is...

Important: Red Hat Security Advisory: httpd security update

Updated Apache httpd packages that correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web server. A flaw...

CVE-2005-2803

CVE-2005-2803 is an XSS vulnerability in Hiki 0.8.1–0.8.2 where the page name used in the Login link is not properly escaped. The issue enables remote attackers to inject arbitrary script/HTML. Other connected sources (JVN/JVNDB/OSV) reference a related Hiki XSS advisory and confirm the same gene...

CVE-2005-2801

CVE-2005-2801 concerns a bug in the ext2/ext3 file system code of the Linux kernel 2.6 where sharing xattr blocks fails to consistently compare name_index fields, potentially causing default ACLs to be applied incorrectly and exposing wrong ACLs for files. Connected advisories (RHSA-2005/2006 and...

CVE-2005-2798

sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts...

CVE-2005-2336

The CVE-2005-2336 entries describe an XSS flaw in Hiki 0.8.0–0.8.2 where page names in missing pages aren’t properly escaped, allowing remote script/HTML injection. Connected sources (JVNDB-2005-000779/000780) outline impact: an attacker could craft content to steal a user’s session ID or, if the...

CVE-2005-2798

Technical details about CVE-2005-2798 are not publicly available in the provided connected documents. No product/version specifics, impact details, or fixes are enumerated here. Monitor for official updates from vendors or security advisories.

CVE-2005-2802

CVE-2005-2802 is rejected and not used; it does not represent an active vulnerability entry.

CVE-2005-2763

OpenTTD is affected by format string vulnerabilities (root cause: format string handling flaws) that exist in versions before 0.4.0.1. This can cause a crash and may allow remote code execution. Affected package: games-simulation/openttd = games-simulation/openttd-0.4.0.1-r1 (GLSA 200509-03). The...

CVE-2005-2802

...

CVE-2005-2797

Vulnerability summary ( OpenSSH 4.0 and earlier than 4.2 ) OpenSSH 4.0 and older than 4.2 is affected by improper handling of dynamic port forwarding when no listen address is provided for the -D option, which may enable GatewayPorts. The connected OpenVAS entry aligns with this class of issue bu...

CVE-2005-2494

CVE-2005-2494 affects KDE kdebase/kcheckpass (kcheckpass in KDE 3.2.0 up to 3.4.2) where a symlink attack on /var/lock lock files can allow a local user to gain root privileges. Root cause: improper lock-file handling in kcheckpass. Affected environments include Red Hat/CentOS, Debian, Ubuntu adv...

CVE-2005-2656

CVE-2005-2656 affects Polygen prior to 1.0.6. It generates precompiled grammar objects with world-writable permissions, allowing a local attacker to cause a denial of service (disk consumption) and potentially perform other unauthorized activities. Debian/Red Hat/OpenVAS records link to a fix in ...

CVE-2005-2700

This CVE concerns the Apache mod_ssl module (ssl_engine_kernel.c) where configuring SSLVerifyClient optional at global vhost level fails to enforce SSLVerifyClient require in per-location contexts. Attackers could bypass intended access restrictions by omitting a client certificate. Affected comp...

CVE-2005-2336

Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...

CVE-2005-2805

The CVE-2005-2805 entry concerns e107 0.6, where forum_post.php is vulnerable. The issue allows remote attackers to post to non-existent forums by modifying the forum number, indicating a parameter manipulation flaw in the forum posting function. The core impact described is that unauthorized par...

CVE-2005-2800

CVE-2005-2800 is a memory leak in the Linux kernel's SCSI procfs sg(devices) interface (for Linux 2.6.13 and earlier). Exploitation arises from repeated reads of /proc/scsi/sg/devices, leading to memory consumption and potential Denial of Service. Publicly documented references describe the issue...