Mandrake Linux Security Advisory : tcpdump (MDKSA-2005:101)

A Denial of Service vulnerability was found in tcpdump during the processing of certain network packages. Because of this flaw, it was possible for an attacker to inject a carefully crafted packet onto the network which would crash a running tcpdump session. The updated packages have been patched...

Mandrake Linux Security Advisory : gaim (MDKSA-2005:099)

More vulnerabilities have been discovered in the gaim IM client. The first is a remote crash with the Yahoo! protocol CVE-2005-1269 and the second is a remote DoS in the MSN protocol CVE-2005-1934. These problems have been corrected in gaim 1.3.1 which is provided with this update. %NASLMINLEVEL...

MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422) (uncredentialed check)

The remote version of Windows contains a flaw in the Server Message Block SMB implementation that may allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2005-1758

Novell NetMail IMAPD is affected by a heap overflow in the IMAP command continuation handling in NetMail versions before 3.52C, enabling unauthenticated remote code execution with the privileges of the NetMail service. Exploitation details are described in iDEFENSE advisory and the Nessus/SEC ref...

CVE-2005-1757

Technical details about CVE-2005-1757 are not publicly provided in the supplied documents; no concrete affected product/version or exploit specifics are listed beyond the general description. Monitor for updates.

CVE-2005-1208

Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help .CHM file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in...

CVE-2005-1211

CVE-2005-1211 is an Internet Explorer PNG rendering memory corruption vulnerability (CAN-2005-1211) in the pngfilt.dll component that could allow remote code execution if a user opens a crafted PNG. Microsoft addressed this with MS05-025, delivering a security update for IE across affected Window...

CVE-2005-1756

Technical details about CVE-2005-1756 are not publicly provided in the supplied documents. Monitor for updates from the cited advisories and CVE records.

CVE-2005-1208

CVE-2005-1208 describes a remote code execution vulnerability in Microsoft HTML Help (CHM/InfoTech Storage protocols like ms-its, ms-itss, its, mk:@MSITStore). The root cause is an integer overflow/heap-based buffer overflow when processing crafted CHM content with a large size field, exploitable...

CVE-2005-1206

CVE-2005-1206 describes a remote code execution vulnerability in Microsoft Windows SMB implementation. The SMB packet validation process contains a buffer-handling flaw that can allow an unauthenticated attacker to execute arbitrary code by sending specially crafted SMB packets. Affected products...

CVE-2005-1306

Adobe Reader/Acrobat 7.0 and 7.0.1 are affected by an information-disclosure vulnerability (XML External Entity) that lets remote attackers determine the existence of local files via Javascript containing XML script. Affected component is the Adobe Reader control; root cause is XML External Entit...

CVE-2005-1266

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service CPU consumption and slowdown via a message with a long Content-Type header without any boundaries...

telnet security update

CentOS Errata and Security Advisory CESA-2005:504-00 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-June/074033.html Affected packages: telnet telnet-server...

telnet security update

CentOS Errata and Security Advisory CESA-2005:504 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-June/074020.html https://lists.centos.org/pipermail/centos-announce/2005-June/074022.html...

CVE-2005-1728

MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials...

CVE-2005-1728

MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, allowing local users to obtain credentials. Affected component: MCX Client; impact: credential disclosure to local users; root cause: insecure logging. No remediation details provided in the sup...

CVE-2005-1723

CVE-2005-1723 affects Apple Mac OS X 10.4.x up to 10.4.1, specifically the LaunchServices component. The flaw is that file extensions and MIME types are not marked as unsafe when an Apple Uniform Type Identifier (UTI) is not created for a type added to the unsafe types database, which could allow...

CVE-2005-1947

The vulnerability CVE-2005-1947 affects Invision Gallery versions prior to 1.3.1. A Cross-site request forgery (CSRF) allows remote attackers to delete albums and images as another user via links or IMG tags targeting the (1) albums or (2) delimg actions. Root cause is CSRF in the affected action...

CVE-2005-1760

Summary: CVE-2005-1760 affects sysreport up to 1.3.15. When run as root, sysreport includes /etc/sysconfig/rhn/up2date; if a proxy password is configured, that password is written in plaintext in the report, enabling local privilege escalation. Affected software/versions: sysreport 1.3.15 and ear...

CVE-2005-1720

AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL...