kpopper10.txt

kpopper insecure temporary file creation Vendor: http://kpopper.sourceforge.net/ Advisory: http://www.zataz.net/adviso/kpopper-06152005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. This...

[SECURITY] [DSA 740-1] New zlib packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA 740-1 [email protected] http://www.debian.org/security/ Michael Stone July 06, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2005-2163

AutoIndex PHP Script 1.5.2 is affected by a stored/reflected XSS in index.php via the search parameter. The vulnerability allows an attacker to inject arbitrary HTML/JavaScript, which is executed in the victim’s browser and can lead to cookie theft or session hijacking. The Nessus entry confirms ...

CVE-2005-2153

CVE-2005-2153 affects osTicket 1.3.1 beta and earlier, where a vulnerability in the PHP file class.ticket.php allows a remote attacker to inject SQL via the ticket variable, enabling arbitrary SQL commands. This is a classic SQL injection flaw that can impact data integrity and confidentiality. T...

CVE-2005-2159

CVE-2005-2159 affects PlanetDNS PlanetFileServer 2.0.1.3 through the mshftp.dll component. According to multiple sources, including NVD and CVE records, remote attackers can cause an application crash (denial of service) by sending a long request to the FTP service. The Nessus entry describes thi...

CVE-2005-2162

The CVE-2005-2162 entry describes a PHP remote file inclusion vulnerability in the MyGuestbook 0.6.1 package, specifically in form.inc.php3, where the lang parameter can be exploited to execute arbitrary PHP code on the server. The connected documents confirm the affected product and vulnerabilit...

CVE-2005-2160

CVE-2005-2160 affects Ipswitch IMail. The connected documents confirm that IMail stores usernames and passwords in cleartext in a cookie, enabling remote attackers to obtain sensitive information. Root cause: credentials exposed in a cookie; impact is disclosure of credentials (no integrity/avail...

CVE-2005-2096

CVE-2005-2096 relates to zlib 1.2 and later, where a crafted compressed stream (e.g., via a PNG) can trigger a buffer overflow due to an incomplete code description of a length > 1, enabling a remote denial of service (crash). Public details consistently describe the vulnerability in zlib usag...

CVE-2005-2151

The CVE-2005-2151 issue affects Courier MTA where SPF DNS failures were not handled properly, potentially enabling memory corruption. Public descriptions across Debian and Ubuntu advisories confirm a remote programming error in Courier’s SPF handling, with SPF checks disabled by default on many s...

CVE-2005-2158

A regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute arbitrary comands, a re-introduction of a vulnerability that was originally identified by CVE-2003-0845...

CVE-2005-2147

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the 1 upload or 2 attachment viewer scripts...

CVE-2005-2148

CVE-2005-2148 affects Cacti 0.8.6e and earlier. The issue is improper input validation in graph_image.php and graph.php, allowing remote attackers to manipulate $_REQUEST by sending a legitimate POST/cookie value and placing the attack string in the URL, potentially enabling arbitrary commands or...

CVE-2005-2160

IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information...

CVE-2005-2151

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework SPF records, which could allow attackers to cause memory corruption...

CVE-2005-1916

CVE-2005-1916 is documented in ekg-related advisories as a local vulnerability in the ekg package (linki.py contributed script). The issue arises from insecure temporary-file handling in contributed scripts, which can be exploited by a local attacker to overwrite/create files and, in at least som...

CVE-2005-2157

The CVE-2005-2157 issue affects the nabopoll 1.2 PHP-based survey software. A vulnerability in survey.inc.php allows remote file inclusion via the path parameter, enabling an attacker to view arbitrary files on the server and potentially execute arbitrary PHP code by loading code from a remote ho...

CVE-2005-2168

Plague News System 0.6 and earlier is affected. The delete.php file allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter, due to an insufficient authorization/authentication check in delete.php. Impact is unauthorized content deletion....

CVE-2005-2161

The CVE-2005-2161 entry covers a cross-site scripting (XSS) vulnerability in phpBB 2.0.16 that allows remote attackers to inject arbitrary script or HTML via nested [url] tags. Connected sources confirm phpBB2 exposure and the Debian security advisory DSA-768-1 (and related Debian/NVD entries) de...

CVE-2005-2154

CVE-2005-2154 concerns osTicket prior to or including 1.3.1 beta, where a PHP Local File Inclusion (LFI) flaw exists in the scripts view.php and open.php . The vulnerability arises from unsafely handling the inc parameter, enabling remote attackers to include and potentially execute arbitrary loc...

CVE-2005-2165

The CVE-2005-2165 entry involves read.cgi in GlobalNoteScript, where remote attackers can execute arbitrary commands by supplying shell metacharacters in the file parameters. This is a remote, unauthenticated activity (attack vector: NETWORK) with a CVSS v2 base score of 7.5 (HIGH) and impact on ...