CVE-2005-2089

CVE-2005-2089 affects Microsoft IIS 5.0 and 6.0. The issue arises when processing an HTTP request that includes both a Transfer-Encoding: chunked header and a Content-Length header, causing IIS to mis-handle and forward the body, which can be treated by the receiving server as a separate HTTP req...

CVE-2005-1922

The MS-Expand file handling in Clam AntiVirus ClamAV before 0.86 allows remote attackers to cause a denial of service file descriptor and memory consumption via a crafted file that causes repeated errors in the climsexpand function...

CVE-2005-1938

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1250. Reason: This candidate is a duplicate of CVE-2005-1250. Notes: this duplicate occurred as a result of multiple independent discoveries and insufficient coordination by the vendor and CNA. All CVE users should reference...

CVE-2005-2019

ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor SMP or Uni Processor UP systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent...

CVE-2005-2084

CVE-2005-2084 describes a cross-site scripting (XSS) vulnerability in SearchResults.aspx within a Community Forum, where an attacker can inject arbitrary web script or HTML through the q parameter. The affected software/component is the Community Forum’s SearchResults.aspx page; the vulnerability...

CVE-2005-1762

CVE-2005-1762 affects AMD64 Linux kernel 2.6.8.1 and 2.6.10; a ptrace() address verification flaw allows local users to crash the kernel (denial of service). Root cause: inadequate verification of non-canonical addresses in amd64 ptrace. Impact: kernel crash; exploitation requires local access. R...

CVE-2005-2086

PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code...

CVE-2005-2081

CVE-2005-2081: A stack-based buffer overflow in the command-parsing path of Asterisk 1.0.7 when the write = command option is enabled may allow remote code execution via a crafted command containing two double quotes followed by a tab. The description clearly specifies the affected product and ro...

CVE-2005-2082

CVE-2005-2082 affects im_trbbs.cgi in imTRSET 1.02 and earlier. The root cause is shell metacharacters in the df parameter, allowing remote attackers to execute arbitrary commands. The available documents do not provide exploit details or a remediation/patch in this entry; no additional technical...

CVE-2005-2081

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character...

CVE-2005-2087

CVE-2005-2087 affects Internet Explorer on Windows, via the JView Profiler (Javaprxy.dll) COM object. The vulnerability is a heap overflow when the COM object is instantiated from a crafted web page, potentially allowing arbitrary code execution or a crash in the user’s context. Exploitation requ...

CVE-2005-1765

The CVE-2005-1765 issue is a local denial of service in the Linux kernel on AMD64 when running in 32‑bit compatibility mode, triggered by syscall() with crafted arguments. Public details across connected docs confirm affected software and fixed packages: Debian’s DSA-922-1 (security advisory) lis...

CVE-2005-2091

CVE-2005-2091 affects IBM WebSphere 5.0/5.1. The vulnerability arises from how WebSphere handles HTTP requests that include both Transfer-Encoding: chunked and a Content-Length header, causing the body to be forwarded in a way that can be treated as a separate HTTP request. This enables remote at...

CVE-2005-2068

CVE-2005-2068 affects the FreeBSD TCP stack (4.x up to 4.11 and 5.x up to 5.4). The issue allows a remote attacker to modify certain TCP options by sending a TCP segment with the SYN flag for an already established connection, leading to a potential denial of service by stalling the TCP connectio...

CVE-2005-2092

BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebLogic to incorrectly handle and forwar...

CVE-2005-2086

Summary of concrete details (CVE-2005-2086) : The phpBB viewtopic.php vulnerability is an arbitrary code execution flaw affecting phpBB 2.0.4 through 2.0.15 (inclusive). The root cause involves improper handling of the highlight parameter in viewtopic.php, enabling PHP code execution on vulnerabl...

XOOPS 2.0.11 && Earlier Multiple Vulnerabilities

GulfTech Security Research June 28th, 2005 Vendor : XOOPS URL : http://www.xoops.org/ Version : XOOPS 2.0.11 And Earlier Risk : Multiple Vulnerabilities Description: XOOPS is a very popular dynamic web content management system written in Object Oriented PHP. One of the features of XOOPS is it's...

FreeBSD Security Advisory FreeBSD-SA-05:15.tcp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:15.tcp Security Advisory The FreeBSD Project Topic: TCP connection stall denial of service Category: core Module: inet Announced: 2005-06-29 Credits: Noritoshi...

FreeBSD Security Advisory FreeBSD-SA-05:13.ipfw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:13.ipfw Security Advisory The FreeBSD Project Topic: ipfw packet matching errors with address tables Category: core Module: netinet Announced: 2005-06-29...

Moderate: Red Hat Security Advisory: sudo security update

An updated sudo package is available that fixes a race condition in sudo's pathname validation. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The sudo superuser do utility allows system administrators to give certain users the ability to run...