[SECURITY] [DSA 784-1] New courier packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 784-1 [email protected] http://www.debian.org/security/ Martin Schulze August 25th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2699

CVE-2005-2699 concerns PHP-Kit 1.6.1 where an unrestricted file upload in admin/admin.php via images.php allows uploading a .php file to content/images/ and executing arbitrary PHP code. The vulnerability requires the attacker to be a remote authenticated administrator, implying privilege within ...

CVE-2005-2697

CVE-2005-2697 affects MyBB (MyBulletinBoard) 1.00 Release Candidate 1–4. The vulnerability is an SQL injection in search.php via the uid parameter, allowing a remote attacker to manipulate SQL queries and potentially disclose or modify data. This CVE overlaps with CVE-2005-0282. Connected sources...

CVE-2005-2693

CVE-2005-2693 affects CVS (cvsbug) and was caused by insecure temporary-file handling in cvsbug, allowing a local attacker to overwrite arbitrary files and potentially execute code via a symlink attack on CVS versions 1.12.12 and earlier. The vulnerability impact includes partial confidentiality,...

CVE-2005-2696

CVE-2005-2696 concerns IBM Lotus Notes/NAB where password hashes could be accessed remotely due to improper restriction of access to password hash data. The description specifies three leakage vectors: (1) password digest in the Administration tab of a Notes client, (2) PasswordDigest and HTTPPas...

CVE-2005-2698

CVE-2005-2698 describes a cross-site scripting (XSS) vulnerability in Nephp Publisher Enterprise 3.04, affecting the file/browse.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a hex-encoded value for the keywords parameter. The vulnerability could impac...

CVE-2005-2697

SQL injection vulnerability in search.php for MyBulletinBoard MyBB 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282...

CVE-2005-2694

CVE-2005-2694 describes a buffer overflow in WinAce 2.6.0.5 (and possibly earlier versions) that allows remote attackers to execute arbitrary code by processing a temporary .tmp file containing an entry with a long file name. Public records identify this as a remote code execution vulnerability w...

CVE-2005-2695

Technical details (affected components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates to CVE-2005-2695 in the included records (NVD/CVE/CVELIST) for new information.

Security fix for the ALT Linux 9 package openvpn version 2.0.2-alt1

Aug. 25, 2005 Nikolay A. Fetisov 2.0.2-alt1 - New version 2.0.2: -- Security fix for several DoS attacks: CAN-2005-2531; CAN-2005-2532; CAN-2005-2533; CAN-2005-2534. -- Several minor bug fixes and improvements, see ChangeLog for details - Run in chroot by default...

CVE-2005-2532

OpenVPN before 2.0.1 is affected by CVE-2005-2532: the server’s handling of packets that cannot be decrypted can lead to disconnection of unrelated clients (a DoS). The root cause is improper flushing of the OpenSSL error queue when a decryption failure occurs, allowing the failure to spill over ...

CVE-2005-2687

SaveWebPortal 3.4 is affected by a PHP remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code via the SITE_Path parameter to menu_dx.php or the CONTENTS_Dir parameter to menu_sx.php. The underlying issue is a remote file inclusion that can lead to code execution...

CVE-2005-2685

SaveWebPortal 3.4 is exposed to a remote PHP code execution flaw: an attacker can trigger arbitrary PHP code by directly requesting admin/PhpMyExplorer/editerfichier.php and editing the fichier parameter (e.g., header.php). The root cause is tied to PhpMyExplorer in the project’s ecosystem. The a...

CVE-2005-2690

CVE-2005-2690 : PostNuke 0.760-RC4b is affected in the Downloads module. The vulnerability is a SQL injection in the dl-viewdownload.php script triggered via the show parameter, allowing an attacker to modify or execute SQL commands. Some sources indicate exploitation requires admin rights and co...

CVE-2005-2531

OpenVPN

CVE-2005-1842

Adobe Version Cue VCNative (VCNative) on Mac OS X (Version Cue 1.0/1.0.1; Creative Suite 1.0/1.3) uses a setuid root VCNative that writes log files with predictable names (e.g., VCNative-[pid].log) in the working directory. This enables a local attacker to perform a symlink attack that can overwr...

CVE-2005-2533

OpenVPN prior to 2.0.1 is affected when running in dev tap Ethernet bridging mode. A remote authenticated client can exhaust memory by sending a flood of packets with spoofed MAC addresses, causing a denial of service. Remediation: upgrade to OpenVPN 2.0.1 or newer as indicated by public advisori...

CVE-2005-2533

OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service memory exhaustion via a flood of packets with a large number of spoofed MAC addresses...

CVE-2005-2534

OpenVPN is affected by a DoS when --duplicate-cn is not enabled: simultaneous TCP connections from multiple clients using the same certificate can crash the server. This is described for OpenVPN

CVE-2005-2556

CVE-2005-2556 affects MantisBT versions 0.19.0a1 through 1.0.0a3 when register_globals is enabled. The issue arises from improper handling of the g_db_type parameter in core/database_api.php, allowing a remote attacker to influence database type and potentially access internal databases; related ...