Apple Safari fails to perform security checks on links in rich text content

Overview Apple Safari fails to perform security checks on hyperlinks in rich text content, which may allow an attacker to execute arbitrary commands on a vulnerable system. Description Mac OS X includes the Safari web browser, which can display rich text RTF files directly. When Safari opens a ri...

Apple Mac OS X Server servermgrd authentication vulnerable to buffer overflow

Overview Apple Mac OS X Server servermgrd contains an unspecified buffer overflow vulnerability in the authentication handling routines. This vulnerability may lead to remote execution of arbitrary code. Description Mac OS X Server contains the servermgrd application for back-end management...

Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update

Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader allows users to view and print documents in portable document format PDF. A buffer overflow bug has...

[SECURITY] [DSA 776-1] New clamav packages fix several problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 776-1 [email protected] http://www.debian.org/security/ Martin Schulze August 16th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2578

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2552. Reason: This candidate is a duplicate of CVE-2005-2552. Notes: All CVE users should reference CVE-2005-2552 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2587

PHPTB Topic Boards 2.0 is affected by a SQL injection in emailvalidate.php that allows remote attackers to execute arbitrary SQL commands via the mid parameter. Root cause is improper input handling in emailvalidate.php leading to SQL manipulation. Documented impact includes potential exposure or...

CVE-2005-2586

The CVE concerns a Mentor ADSL-FR4II router with firmware 2.00.0111 that stores the web administration password in cleartext inside the backup configuration file. This exposes sensitive credentials to local users who can access the backup config, enabling partial confidentiality impact as describ...

CVE-2005-2578

CVE-2005-2578 is rejected/not used and does not represent an active vulnerability entry.

CVE-2005-2103

Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n...

CVE-2005-2584

Affected product: Mentor ADSL-FR4II router (firmware 2.00.0111). Vulnerability: The web administration interface does not set a default password, allowing local users to gain access. Impact: local access with likely full control over the device. Root cause (as stated): lack of a default password ...

CVE-2005-2102

CVE-2005-2102 affects the GAIM/ICQ module in Gaim prior to 1.5.0. A remote attacker can cause a denial of service (application crash) by sending a filename containing invalid UTF-8 characters. Mitigation: upgrade to Gaim 1.5.0 or newer (as indicated by multiple advisories in connected documents)....

CVE-2005-2103

Summary of CVE-2005-2103 (Gaim AIM/ICQ buffer overflow) : The AIM/ICQ protocol handler in Gaim up to version before 1.5.0 is vulnerable to a heap/away-message buffer overflow. A remote attacker can send a crafted away message containing many AIM substitution strings (e.g., %t, %n), potentially ca...

CVE-2005-2569

Affected software: FunkBoard 0.66CF (and possibly earlier). Vulnerability: multiple cross-site scripting (XSS) flaws allow remote attackers to inject arbitrary script/HTML via numerous parameters across several pages (register.php, editpost.php, prefs.php, newtopic.php, reply.php, profile.php); l...

CVE-2005-2558

CVE-2005-2558 describes a stack-based buffer overflow in the init_syms function of MySQL. The flaw occurs in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, triggered by a long function_name field when creating user-defined functions (UDFs). The vulnerability allows remote ...

CVE-2005-2577

Wyse Winterm 1125SE devices running firmware 4.2.09f or 4.4.061f are reported vulnerable to a remote denial of service via a crafted IP packet with a zero in the IP option length field, per CVE-2005-2577. The vulnerability targets the device’s network stack and can cause a crash without requiring...

CVE-2005-2559

CVE-2005-2559 affects the e107 web portal’s ePing plugin (versions 1.02 and earlier). The vulnerability arises from improper handling/validation of the eping_count and eping_host parameters in doping.php, allowing shell metacharacters to be injected and used in system() calls. Consequence: remote...

CVE-2005-2582

Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 has world-writable permissions on the log and license directories, enabling local users to delete log files, perform a symlink attack to kavmonitor.log (append to arbitrary files), or delete license keys and disrupt keepup2date. The connected...

CVE-2005-2097

CVE-2005-2097 affects xpdf and variants such as gpdf (and related components like CUPS’ pdftops) where carefully crafted PDFs can cause a denial of service by exhausting disk space (creating a large temporary file). Public sources in the connected documents confirm heap-based overflows and DoS po...

CVE-2005-2576

CaLogic 1.22 (and possibly earlier) is affected by CVE-2005-2576. A remote attacker can cause an information disclosure by requesting any of the following endpoints: doclsqlres.php, clmcpreload.php, viewhistlog.php, mcconfig.php, doclsqlbak.php, defcalsel.php, or cl_minical.php. The vulnerability...

CVE-2005-2581

Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to cause a denial of service device hang or reboot via a large UDP packet to port 5060...