RHEL 2.1 : dhcpcd (RHSA-2005:603)

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

RHEL 4 : kdelibs (RHSA-2005:612)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:612 advisory. kdelibs contains libraries for the K Desktop Environment. A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite. Depending on...

SUSE-SA:2005:043: zlib

The remote host is missing the patch for the advisory SUSE-SA:2005:043 zlib. The previous zlib update for CVE-2005-2096 fixed a flaw in zlib that could allow a carefully crafted compressed stream to crash an application. While the original patch corrected the reported overflow, Markus Oberhumer...

[SECURITY] [DSA 770-1] New gopher packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 770-1 [email protected] http://www.debian.org/security/ Martin Schulze July 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 769-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 769-1 [email protected] http://www.debian.org/security/ Martin Schulze July 29th, 2005 http://www.debian.org/security/faq -...

uguestbook exploit

hello , By ...... MeSa7eB Data ...... 28/7/2005 pro ...... http://www.uapplication.com/ My web site : http://3asfh.net/vb My Email : [email protected] =============================================== exploit : http://xxx.com/guestbook/mdb-database/guestbook.mdb ==================================...

CVE-2005-2406

CVE-2005-2406 affects Opera 8.01. The vulnerability allows remote attackers to perform cross-site scripting (XSS) or alter which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI. Root cause is input handling during file drag that leads to script execution. ...

dhcpcd security update

CentOS Errata and Security Advisory CESA-2005:603-01 An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of...

Moderate: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. kdelibs contains libraries for the K Desktop Environment. A flaw was discovered affecting Kate, the KDE advanced text...

Moderate: Red Hat Security Advisory: dhcpcd security update

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

[SECURITY] [DSA 765-1] New heimdal packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 765-1 [email protected] http://www.debian.org/security/ Martin Schulze July 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 765-1] New heimdal packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 765-1 [email protected] http://www.debian.org/security/ Martin Schulze July 22nd, 2005 http://www.debian.org/security/faq -...

CVE-2005-2395

Affected software: Mozilla Firefox 1.0.4 and 1.0.5. Vulnerability type / cause: Firefox may not select the strongest available HTTP authentication challenge as required by RFC2617, potentially causing credentials to be sent in plaintext even when an encrypted channel exists. Impact (as stated): c...

CVE-2005-2385

Vulnerability in avast! antivirus (UNACEV2.DLL) used for ACE archive handling. The issue is a stack-based buffer overflow due to improper boundary checking when scanning ACE files, which can be triggered by a long filename in an ACE archive. This leads to remote code execution with SYSTEM privile...

CVE-2005-2335

Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...

CVE-2005-2391

The CVE-2005-2391 entry concerns the 3Com OfficeConnect Wireless 11g Access Point, affected before version 1.03.12. The vulnerability is described as unknown but allows remote attackers to obtain sensitive information through the device’s web interface. The connected sources confirm the product a...

CVE-2005-2400

The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges...

CVE-2005-2393

CVE-2005-2393 affects CuteNews 1.3.6. The vulnerability is a cross-site scripting (XSS) flaw exploitable via two user-supplied parameters: (1) lastusername in index.php and (2) selected_search_arch in search.php. The underlying issue is insufficient input sanitization/escaping, allowing a remote ...

CVE-2005-2403

The CVE-2005-2403 entry affects RealChat 3.5.1b where the login protocol does not require authentication. The vulnerability allows remote attackers to log in as other users by sniffing the beginning of a chat session and replaying it with a modified username. The NVD data notes a CVSS v2 base sco...

CVE-2005-2335

CVE-2005-2335: Buffer overflow in fetchmail's POP3 client (UIDL handling) allows a remote POP3 server to crash fetchmail or potentially execute arbitrary code. Affects fetchmail prior to the patched release. Remediation involves upgrading to the fixed fetchmail version (e.g., 6.2.5.2 per the init...