CVE-2005-2235

The CVE-2005-2235 vulnerability affects IBM AIX 5.1, 5.2 and 5.3, where a buffer overflow in the diagTasksWebSM command could allow local users to execute arbitrary code via long command line arguments. The provided documents state the affected product and the underlying cause (buffer overflow in...

CVE-2005-2247

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors...

McAfee Intrushield IPS Abuse Update is available

HI, The IntruShield Manager version 2.1.9.17 contains several updates that correct the vulnerable components that were targeted. IntruShield customers may download the new manager version from: http://www.mcafeesecurity.com/us/downloads/default.asp?wt.mcn=usupdates&wt.mct=extlicon&cid=10373 On 6...

Mandrake Linux Security Advisory : cpio (MDKSA-2005:116-1)

A race condition has been found in cpio 2.6 and earlier which allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete CVE-2005-1111. A vulnerability has...

[SECURITY] [DSA 751-1] New squid packages fix IP spoofing vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 751-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 752-1] New gzip packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 752-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 750-1] New dhcpcd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 750-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2213

MMS Ripper contains a buffer overflow in mms_interp_header (in mms.c) that affects versions before 0.6.4. A crafted file with more than 20 streams can allow remote code execution. Impact: arbitrary code execution by crafted input via the vulnerable file. Root cause: unsafe handling in mms_interp_...

CVE-2005-2197

SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f parameter to index.php...

CVE-2005-2211

CVE-2005-2211 affects Backup Manager 0.5.8a, where insecure temporary file creation enables local users to perform unauthorized file operations during CD burning. The description across multiple sources confirms the root cause as insecure handling of temporary files, leading to potential partial ...

CVE-2005-2200

CVE-2005-2200 involves multiple unknown flaws in the MicroServer Web Server of Xerox WorkCentre Pro Color devices (2128, 2636, 3545) with software versions 0.001.04.044–0.001.04.504 that allow an attacker to bypass authentication. The NVD entry lists a base score of 7.5 (HIGH) with network attack...

CVE-2005-2214

The vulnerability CVE-2005-2214 concerns apt-setup from Debian GNU/Linux, where the apt.conf file is installed with insecure permissions. This permits local users to read sensitive information such as passwords stored in apt.conf. The description and connected sources confirm the affected compone...

CVE-2005-2205

The CVE-2005-2205 entry describes a vulnerability in the ReadLog function of kaiseki.cgi in pngren, where remote attackers can execute arbitrary commands by supplying shell metacharacters in the query string. This is tied to a web-facing CGI component (kg ren/pngren) that processes input in a way...

CVE-2005-2201

CVE-2005-2201 affects the MicroServer Web Server used by Xerox WorkCentre Pro Color devices (models 2128, 2636, 3545) with firmware versions 0.001.04.044–0.001.04.504. The vulnerability allows an attacker to cause a denial of service or access files via crafted HTTP requests. Current documents co...

CVE-2005-2199

PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the configpparootpath variable...

CVE-2005-1768

The CVE-2005-1768 issue is a race condition in the Linux kernel’s IA32 (x86) compatibility execve() handling, affecting amd64/Intel EM64T and Itanium platforms. A concurrent thread can increment a pointer count after nargs has counted pointers but before copying from user space to kernel space, l...

CVE-2005-1848

CVE-2005-1848 affects the dhcpcd DHCP client (pre-1.3.22). The issue is an out-of-bounds memory read that can cause the dhcpcd daemon to crash, enabling a denial-of-service condition. Public references note advisories and distributions (e.g., Debian DSA-750-1, Gentoo GLSA 200507-16, Slackware SSA...

CVE-2005-2210

CVE-2005-2210 describes a stack-based buffer overflow in Internet Download Manager 4.05 when processing a long URL, allowing remote code execution. The connected PT-2005-3139 entry confirms affected software and version, noting the issue is triggered by a long URL and that no fix/version is liste...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-2150

CVE-2005-2150 affects Windows NT 4.0 and Windows 2000 prior to URP1 for Windows 2000 SP4. It stems from insufficient handling of NULL sessions over alternate named pipes, enabling anonymous access to certain interfaces (svcctl and eventlog). Exploitation could allow an unauthenticated remote atta...