CVE-2005-2669

CVE-2005-2669 affects Computer Associates Message Queuing Service (CAM/CAFT): vulnerable in CAM versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13. The root cause is a stack overflow in the remote service’s log_security function, which may allow an unauthenticated attacker to ex...

CVE-2005-2676

The CVE-2005-2676 entry concerns Coppermine Photo Gallery prior to version 1.3.4, where displayimage.php is vulnerable to cross-site scripting via crafted EXIF data. The vulnerability allows an attacker-supplied EXIF payload to be reflected into the HTML/JS context, enabling arbitrary script exec...

CVE-2005-2679

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...

CVE-2005-2678

CVE-2005-2678 affects Microsoft IIS 5.1 and IIS 6. The issue allows remote attackers to spoof the SERVER_NAME variable by issuing a GET request containing an http://localhost URI, bypassing security checks and enabling various attacks. Some connected sources also describe an ASP source code discl...

CVE-2005-2672

pwmconfig in LMsensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file...

CVE-2005-2641

Unknown vulnerability in pamldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate...

Debian DSA-782-1 : bluez-utils - missing input sanitising

Henryk Plotz discovered a vulnerability in bluez-utils, tools and daemons for Bluetooth. Due to missing input sanitising it is possible for an attacker to execute arbitrary commands supplied as device name from the remote device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

RHEL 4 : php (RHSA-2005:748)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:748 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RPC Server package...

RHEL 4 : netpbm (RHSA-2005:743)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:743 advisory. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm portable bitmaps,...

Fedora Core 4 : slocate-2.7-22.fc4.1 (2005-770)

A carefully prepared directory structure could stop the updatedb file system scan, resulting in an incomplete slocate database. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2499 to this issue. Note that Tenable Network Security has extracted the preceding...

Fedora Core 3 : squirrelmail-1.4.6-0.cvs20050812.1.fc3 (2005-779)

It probably is not a good idea to push a CVS snapshot here, but upstream screwed up their 1.4.5 release and CVS contains further fixes like PHP5 related stuff that might make squirrelmail usable on FC4. This snapshot worked on my personal server for the past week, so hopefully it will be good for...

Microsoft Windows Color Management TIFF Parsing Buffer Overflow (MS05-036; CVE-2005-1219)

...

Fedora Core 4 : squirrelmail-1.4.6-0.cvs20050812.1.fc4 (2005-780)

It probably is not a good idea to push a CVS snapshot here, but upstream screwed up their 1.4.5 release and CVS contains further fixes like PHP5 related stuff that might make squirrelmail usable on FC4. This snapshot worked on my personal server for the past week, so hopefully it will be good for...

RHEL 4 : vim (RHSA-2005:745)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:745 advisory. VIM VIsual editor iMproved is a version of the vi editor. A bug was found in the way VIM processes modelines. If a user with modelines enabled opens a...

slocate security update

CentOS Errata and Security Advisory CESA-2005:747-02 An updated slocate package that fixes a denial of service issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate,...

Low: Red Hat Security Advisory: netpbm security update

Updated netpbm packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm...

CVE-2005-2499

slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...

CVE-2005-2491

CVE-2005-2491 refers to an integer overflow in PCRE’s quantifier parsing (PCRE before 6.2) that can cause a heap-based buffer overflow, enabling arbitrary code execution when reg-exes are crafted. Affected software includes programs that embed PCRE (e.g., Python, PHP, and other apps). Connected d...

CVE-2005-2457

CVE-2005-2457 affects the Linux kernel zisofs driver for compressed ISO files. The vulnerability in the driver in older kernels (before 2.6.12.5) allows local users and remote attackers to trigger a denial of service (kernel crash) by crafting a compressed ISO filesystem. The issue is confirmed a...

CVE-2005-2664

CVE-2005-2664 affects Whisper 32 1.16 (and possibly earlier) where passwords are stored in plaintext in memory. The underlying cause is unencrypted password storage in the process, enabling local users to read memory via a debugger or similar tool. The impact is information disclosure of password...