CVE-2005-2327

The CVE-2005-2327 entry describes a Cross-site scripting (XSS) vulnerability in the e107 content management system, affecting version 0.617 and earlier. The root cause is input handling that allows nested [url] BBCode tags to be processed in a way that enables remote injection of arbitrary script...

CVE-2005-2332

CVE-2005-2332 describes a cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a. The issue allows remote attackers to inject arbitrary web script or HTML via the username parameter to admin.php or login.php. The provided sources confirm the affected product/version and the vulnerable ...

CVE-2005-2334

The CVE-2005-2334 entry describes a remote command execution vulnerability in Y.SAK where shell metacharacters in the $no variable allow an attacker to run arbitrary commands via three CGI scripts: w_s3mbfm.cgi, w_s3adix.cgi, or w_s3sbfm.cgi. The available sources confirm the vulnerable component...

CVE-2005-2329

MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S (3.5.0) have an access-control flaw in SSH public-key authentication that does not properly restrict port access, potentially allowing remote authenticated users to access other users’ consoles. The explicit root cause or remediation is...

CVE-2005-2331

CVE-2005-2331 involves a PHP remote file inclusion vulnerability in MooseGallery’s display.php, where the type parameter allows an attacker to cause arbitrary PHP code execution. Affected software is MooseGallery (PHP-based) with vulnerable display.php handling the type parameter. The underlying ...

CVE-2005-2328

PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbitrary PHP code via the CFGPATH variable...

SOL4441 - BSD telnet vulnerabilities CAN-2005-0468 and CAN-2005-0469

Was this resource helpful in solving your issue? Yes - this resource was helpful No - this resource was not helpful I don‘t know yet NOTE: Please do not provide personal information. Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:...

SUSE-SA:2005:034: opera

The remote host is missing the patch for the advisory SUSE-SA:2005:034 opera. The web browser Opera has been updated to version 8.01 to fix various security-related bugs. Fixed XMLHttpRequest redirect vulnerability reported in Secunia Advisory 15008. Fixed cross-site scripting vulnerability...

SUSE-SA:2005:031: opera

The remote host is missing the patch for the advisory SUSE-SA:2005:031 opera. The commercial web browser Opera has been updated to the 8.0 version, fixing all currently known security problems, including: - CVE-2005-0235: IDN cloaking / homograph attack allows easy spoofing of domain names. -...

SUSE-SA:2005:041: php/pear XML::RPC

The remote host is missing the patch for the advisory SUSE-SA:2005:041 php/pear XML::RPC. A bug in the PEAR::XMLRPC library allowed remote attackers to pass arbitrary PHP code to the eval function. The updated php packages fix the XML::RPC bug, however several third party PHP packages include a...

SUSE-SA:2005:039: zlib

The remote host is missing the patch for the advisory SUSE-SA:2005:039 zlib. A denial of service condition was fixed in the zlib library. Any program using zlib to decompress data can be crashed by a specially handcrafted invalid data stream. This includes web browsers or email programs able to...

SUSE-SA:2005:035: razor-agents

The remote host is missing the patch for the advisory SUSE-SA:2005:035 razor-agents. Several bugs were fixed in Vipuls Razor spam detection framework. These bugs could lead to remote denial-of-service conditions due to processing malformed messages and possible stepping into infinite loops...

Crob FTP Server < 3.6.1 build 263 Multiple Vulnerabilities

The version of Crob FTP Server on the remote host suffers from multiple remote buffer overflows. Once authenticated, an attacker can exploit these vulnerabilities to crash the affected daemon and even execute arbitrary code remotely within the context of the affected service. C Tenable Network...

SUSE-SA:2005:038: clamav

The remote host is missing the patch for the advisory SUSE-SA:2005:038 clamav. This security update upgrades the Clamav virus scan engine to the version 0.68.1. Among other bugfixes and improvements, this update fixes a bug in the Quantum decompressor routines that can be used for a remote denial...

Fedora Core 3 : kdelibs-3.3.1-2.14.FC3 (2005-594)

A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite. Depending on system settings it may be possible for a local user to read the backup files created by Kate or Kwrite. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-1920 to this issue. User...

SOL4809 - tcpdump vulnerabilities - CAN-2005-1278, CAN-2005-1279, and CAN-2005-1280

F5 Networks Product Development tracked this issue as CR48152 and CR48153 and it was fixed in BIG-IP and 3-DNS version 4.5.13. This issue still exists in the BIG-IP and 3-DNS 4.6 software branch...

SUSE-SA:2005:032: java2

The remote host is missing the patch for the advisory SUSE-SA:2005:032 java2. Two security bugs in the SUN Java implementation have been fixed. Java Web Start can be exploited remotely due to an error in input validation of tags in JNLP files, so an attacker can pass arbitrary command-line option...

SUSE-SA:2005:036: sudo

The remote host is missing the patch for the advisory SUSE-SA:2005:036 sudo. Sudo8 allows the execution of commands as another user and gives the administrator more flexibility than su1. A race condition in the pathname handling of sudo may allow a local user to execute arbitrary commands. To...

SUSE-SA:2005:042: acroread 5

The remote host is missing the patch for the advisory SUSE-SA:2005:042 acroread 5. This update fixes a buffer overflow in Acrobat Reader versions 5, where an attacker could execute code by providing a handcrafted PDF to the viewer. The Acrobat Reader 5 versions of SUSE Linux 9.0 up to 9.2, SUSE...

SUSE-SA:2005:033: spamassassin

The remote host is missing the patch for the advisory SUSE-SA:2005:033 spamassassin. The anti spam tool SpamAssassin was prone to a denial-of-service attack. A remote attacker could craft a MIME E-Mail message that would waste a lot of CPU cycles parsing the Content-Type header. This is tracked b...