CVE-2005-2500

CVE-2005-2500: A buffer overflow in the Linux kernel 2.6.12 code path (xdr_xcode_array2 in xdr.c) used by SuSE Linux Enterprise Server 9 can be triggered by crafted XDR data for the nfsacl protocol, potentially allowing remote denial of service and possibly arbitrary code execution. The vulnerabi...

CA BrightStor MS-SQL Server ARCserve Backup Agent Buffer Overflow (CAN-2005-1272)

...

Jaws BlogModel.php path Parameter Remote File Inclusion

The remote host is running JAWS, a content management system written in PHP. The remote version of Jaws allows an attacker to include URLs remotely. This may allow for the execution of arbitrary code with the privileges of the web server. %NASLMINLEVEL 70300 This script was written by Josh...

CVE-2005-2489

The CVE concerns Web Content Management News System. The vulnerability originates from a direct request to Admin/Users/AddModifyInput.php that lets remote attackers create arbitrary user accounts and gain privileges. This implies a bypass of normal authorization checks and potential privilege esc...

CVE-2005-2482

CVE-2005-2482 affects Metasploit Framework 2.4 and earlier (msfweb StateToOptions). The vulnerability occurs when running with -D (defanged mode): an attacker could modify temporary environment variables before the _Defanged check is performed while processing the Exploit command. NVD lists a Bas...

CVE-2005-2484

The CVE-2005-2484 issue concerns Denora IRC Stats 1.0, where a buffer overflow in the rdb_query function could allow an attacker to execute arbitrary code. The available sources state this vulnerability and its potential to impact confidentiality, integrity, and availability, but do not provide c...

CVE-2005-2488

Cross-site scripting XSS vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via 1 the strRootpath parameter to validsession.php or 2 the strTable parameter to Admin/News/List.php...

CVE-2005-2485

CVE-2005-2485 concerns a cross-site scripting (XSS) vulnerability in the Helpdesk component of Logicampus prior to version 1.1.1. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Affected software: Logicampus Helpdesk (before 1.1.1). Underlying...

CVE-2005-2482

The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option defanged mode, allows attackers to modify temporary environment variables before the "Defanged" environment option is checked when processing the Exploit command...

CVE-2005-2486

SQL injection vulnerability in modforum/readmessage.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to "Forum-readmess", a different vulnerability than CVE-2005-1701...

CVE-2005-2483

Karrigell before 2.1.8 is affected by an eval-injection vulnerability in its services (.ks) scripts, allowing remote attackers to run arbitrary Python code by passing modified arguments that reference library functions used by the script. The connected documents do not provide exploit details bey...

CVE-2005-2488

The CVE-2005-2488 entry describes a Cross-site scripting (XSS) vulnerability in Web Content Management News System. The vulnerability allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/Li...

CVE-2005-2487

CVE-2005-2487 affects Sun McData switches and directors 4300, 4500, 6064 and 6140 prior to E/OS 6.0.0. The vulnerability may allow a denial-of-service impacting connectivity and array access through a network broadcast storm. The provided documents indicate the affected components and the likely ...

RHEL 4 : ruby (RHSA-2005:543)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:543 advisory. Ruby is an interpreted scripting language for object-oriented programming. A bug was found in the way Ruby launched an XMLRPC server. If an XMLRPC...

[Full-disclosure] iDEFENSE Security Advisory 08.05.05: EMC Navisphere Manager Directory Traversal Vulnerability

EMC Navisphere Manager Directory Traversal Vulnerability iDEFENSE Security Advisory 08.05.05 www.idefense.com/application/poi/display?id=288&type=vulnerabilities August 05, 2005 I. BACKGROUND EMC Navisphere storage management software is a suite of tools that enables discovery, monitoring,...

CVE-2005-2480

The CVE-2005-2480 entry concerns Fusebox running on ColdFusion (Fusebox 4.1.0). The vulnerability is a cross-site scripting (XSS) flaw where the fuseaction parameter is not quoted in an error page, enabling an attacker to inject arbitrary script/HTML (demonstrated via index.cfm). Connected docume...

CVE-2005-2473

The CVE-2005-2473 entry concerns ChurchInfo and documents multiple SQL injection vulnerabilities in which an attacker can cause remote execution of arbitrary SQL via the PersonID parameter to several PHP scripts (PersonView.php, MemberRoleChange.php, PropertyAssign.php, WhyCameEditor.php, GroupPr...

CVE-2005-2472

Affected product: BusinessMail 4.60.00. Vulnerability: multiple buffer overflows in the SMTP command handling (HELO and MAIL FROM) that allow a remote, unauthenticated attacker to crash the SMTP service; the Nessus entry also notes possible arbitrary code execution within the server process. Impa...

CVE-2005-1761

CVE-2005-1761 affects the Linux kernel 2.6 and 2.4 on IA-64. The issue allows local users to crash the kernel (denial of service) via the ptrace mechanism and the restore_sigcontext function. The vulnerability is a local privilege/impact scenario with a kernel crash, as indicated by the CVE mappi...

CVE-2005-1268

Off-by-one error in the modssl Certificate Revocation List CRL verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service child process crash via a CRL that causes a buffer overflow of one null byte...