CVE-2005-1956

This CVE (CVE-2005-1956) involves a file upload vulnerability where remote attackers can upload arbitrary files by setting a test variable to '~~~~~~' (six tildes), bypassing file-extension checks. The underlying issue is bypassing input/validation logic to allow non-conforming file types. Outcom...

CVE-2005-1964

CVE-2005-1964 is a PHP remote file inclusion (RFI) vulnerability affecting Ovidentia Portal (Cantico Ovidentia 5.8.0 as cited). The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted babInstallPath URL parameter, targeting utilit.php. Related entries (CVE-2006-2811)...

CVE-2005-1959

CVE-2005-1959 affects JamMail 1.8. The vulnerability is in jammail.pl where the mail parameter is not sanitized, allowing a remote attacker to execute arbitrary shell commands with the web server’s privileges. This is a remote command-execution flaw via shell metacharacters in the mail parameter....

CVE-2005-1969

The CVE-2005-1969 entry describes a cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 that allows remote attackers to inject arbitrary web script or HTML and hide activities in log files by inserting an HTML comment "

CVE-2005-0488

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

CVE-2005-1975

The CVE-2005-1975 entry concerns multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier. The affected components are the index.php script (id parameter) and commentaires.php (site_id, nom, email, commentaire parameters). Exploitation would allow remote attackers to i...

CVE-2005-1214

CVE-2005-1214 involves a spoofing flaw in Microsoft Agent that could allow remote attackers to impersonate trusted Internet content and potentially execute arbitrary code when a user visits a malicious Web page. Connected docs confirm the vulnerability (CAN-2005-1214) exists in Microsoft Agent an...

MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422)

The remote version of Windows contains a flaw in the Server Message Block SMB implementation that could allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

MS05-030: Vulnerability in Outlook Express Could Allow Remote Code Execution (897715)

The remote host is running a version of Microsoft Outlook Express that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to lure a user to connect to a rogue NNTP news server sending malformed replies to several queries. C Tenable...

Microsoft Outlook Express vulnerable to remote code execution

Overview A vulnerability in Microsoft Outlook Express's NNTP response parsing may allow an attacker to execute arbitrary code. Description Microsoft Outlook Express contains support for Network News Transfer Protocol NNTP data, which is defined in RFC 977 and RFC 2980. A flaw in Outlook Express'...

SOL4256 - RADIUS integer overflow vulnerability CAN-2005-0108

Was this resource helpful in solving your issue? Yes - this resource was helpful No - this resource was not helpful I don‘t know yet NOTE: Please do not provide personal information. Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:...

MS05-025: Cumulative Security Update for Internet Explorer (883939)

The remote host is missing IE Cumulative Security Update 883939. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18490;...

MS05-031: Vulnerability in Step-by-Step Interactive Training (898458)

The remote host is running a version of Microsoft Step-by-Step Interactive Training that contains a flaw that could lead to remote code execution. To exploit this flaw, an attacker would need to trick a user on the remote host into opening a malformed file with the affected application. C Tenable...

gzip security update

CentOS Errata and Security Advisory CESA-2005:357-01 An updated gzip package is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The gzip package contains the GNU gzip data compression program. A bug was found in the way zgrep processe...

gzip security update

CentOS Errata and Security Advisory CESA-2005:357 An updated gzip package is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The gzip package contains the GNU gzip data compression program. A bug was found in the way zgrep processes...

Moderate: Red Hat Security Advisory: gedit security update

An updated gedit package that fixes a file name format string vulnerability is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team gEdit is a small text editor designed specifically for the GNOME GUI desktop. A file name format string...

Moderate: Red Hat Security Advisory: sysreport security update

An updated sysreport package that fixes an information disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team Sysreport is a utility that gathers information about a system's hardware and configuration. The information...

Moderate: Red Hat Security Advisory: gftp security update

An updated gFTP package that fixes a directory traversal issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user...

CVE-2005-1473

SecurityAgent in Apple Mac OS X 10.4.1 allows attackers with physical access to bypass the locked screensaver and launch background applications by opening a URL from a text input field...

CVE-2005-1937

The CVE-2005-1937 entry documents a regression in Firefox 1.0.3 and Mozilla 1.7.7 that reintroduces a frame injection spoofing vulnerability (remote JS injection from one page into the frameset of another site). This vulnerability is a re-introduction of CVE-2004-0718 and is described with a CVSS...