10535 matches found
CVE-2005-1277
CVE-2005-1277 is a duplicate of CVE-2005-1766. The connected documents provide concrete details for CVE-2005-1766: a heap/buffer overflow vulnerability in the RealText parser used by RealPlayer/HelixPlayer that could allow remote code execution when processing RealMedia/RealText content. The root...
RHEL 4 : HelixPlayer (RHSA-2005:517)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:517 advisory. HelixPlayer is a media player. A buffer overflow bug was found in the way HelixPlayer processes SMIL files. An attacker could create a specially craft...
RHEL 3 / 4 : RealPlayer (RHSA-2005:523)
An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 05 Jul 2005 The previous package for Red Hat Enterprise Linux 4 did not contain the proper fix for this...
RHEL 4 : freeradius (RHSA-2005:524)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:524 advisory. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized authentication and authorization fo...
RHEL 4 : spamassassin (RHSA-2005:498)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:498 advisory. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from incoming email. A denial of service bug has been found in SpamAssassin. A...
[VulnWatch] Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability: Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability
Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability iDEFENSE Security Advisory 06.23.05 www.idefense.com/application/poi/display?id=270&type=vulnerabilities June 23, 2005 I. BACKGROUND VERITAS Backup Exec is an advanced backup and restore solution for Microsoft Windows server...
Rhapsody vidplin.dll AVI Processing Heap Overflow Vulnerability
The remote installation of Rhapsody has a heap overflow in the 'vidplin.dll' file used to process AVI files. With a specially- crafted AVI file, an attacker can exploit this flaw to cause arbitrary code to be run within the context of the affected application when a user opens the file. C Tenable...
HelixPlayer security update
CentOS Errata and Security Advisory CESA-2005:517 An updated HelixPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A buffer overflow bug was found...
spamassassin security update
CentOS Errata and Security Advisory CESA-2005:498 An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way t...
freeradius security update
CentOS Errata and Security Advisory CESA-2005:524 Updated freeradius packages that fix a buffer overflow and possible SQL injection attacks in the sql module are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeRADIUS is a...
Critical: Red Hat Security Advisory: RealPlayer security update
An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 05 Jul 2005 The previous package for Red Hat Enterprise Linux 4 did not contain the proper fix for this...
Moderate: Red Hat Security Advisory: spamassassin security update
An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from...
MS Windows (SMB) Transaction Response Handling Exploit (MS05-011)
漏洞描述：Windows SMB客户端在处理SMB响应时存在一个缓冲区溢出漏洞。恶意的SMB服务器可以利用这个漏洞在连接该服务器的SMB客户端主机上执行任意命令。MRXSMB.SYS驱动负责执行SMB客户端操作以及处理SMB服务器返回的响应。一些重要的Windows文件共享操作以及所有的RPC-over-named-pipes操作使用SMB命令Trans25h和Trans232h。一个恶意的SMB服务器通过发送特殊的Transaction响应数据可能导致一个缓冲区溢出漏洞。溢出可能发生在任何这个数据被处理的地方，例如MRXSMB.SYS或其他客户端代码中。例如，如果Trans2...
Microsoft Windows - 'SMB' Transaction Response Handling (MS05-011)
/ Windows SMB Client Transaction Response Handling MS05-011 CAN-2005-0045 This works against Win2k cybertronicatgmxdotnet http://www.livejournal.com/users/cybertronic/ usage: gcc -o mssmbpoc mssmbpoc.c ./mssmbpoc connect via \ip and hit the netbios folder! STOP: 0x00000050...
iDEFENSE Security Advisory 06.22.05: IpSwitch WhatsUp Professional 2005 (SP1) SQL Injection Vulnerability
IpSwitch WhatsUp Professional 2005 SP1 SQL Injection Vulnerability iDEFENSE Security Advisory 06.22.05 www.idefense.com/application/poi/display?id=268&type=vulnerabilities June 22, 2005 I. BACKGROUND WhatsUp Professional 2005 SP1 is a network management solution for small and mid sized...
CVE-2005-1526
CVE-2005-1526 is a PHP remote file inclusion/input validation vulnerability in Cacti before 0.8.6e, where an attacker could include remote PHP code via config[include_path] in config_settings.php and execute arbitrary code. Multiple connected advisories (Debian DSA-764-1 and GLSA/OpenVAS entries)...
CVE-2005-2044
CVE-2005-2044 affects ATutor (versions 1.4.3 and 1.5 RC1) with multiple reflected cross-site scripting (XSS) flaws. The vulnerability enables remote attackers to inject arbitrary web script or HTML through a long list of parameters across several pages: show_course (browse.php), subject (contact....
CVE-2005-1525
CVE-2005-1525 is an SQL injection vulnerability in Cacti prior to 0.8.6e. The issue affects the config_settings.php file, where the id parameter allows remote attackers to execute arbitrary SQL commands. This is a remote code execution risk through database manipulation resulting from improper in...
CVE-2005-2046
CVE-2005-2046 affects DUware DUamazon Pro 3.0 and 3.1 (ASP storefront). The vulnerability consists of multiple SQL injection flaws where attacker-controlled input in various parameters (iCat, iSub, iPro, and iType across cat.asp, sub.asp, detail.asp, review.asp, catEdit.asp, catDelete.asp, produc...
