CVE-2005-0151

Technical details about CVE-2005-0151 are not provided in the supplied documents. No product-specific vulnerability details, affected versions, root cause, or fixes are cited here. Monitor for updates from official sources.

CVE-2005-1934

GAIM (the multi-protocol instant messaging client) is affected. CVE-2005-1934 arises from processing a malformed MSN message that triggers an overly large memory allocation, likely due to an integer signedness error, causing the application to crash (denial of service). Multiple connected advisor...

CVE-2005-1935

Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library MSASN1.DLL allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as...

CVE-2005-1473

CVE-2005-1473 affects Apple Mac OS X 10.4.1 where SecurityAgent can be triggered by a URL opened from a text input field, allowing attackers with physical access to bypass the locked screensaver and launch background applications. The Red Hat/NVD entries confirm the same behavior. The vulnerabili...

CVE-2005-1964

PHP remote file inclusion vulnerability in utilit.php for Ovidentia Portal allows remote attackers to execute arbitrary PHP code via the babInstallPath parameter...

CVE-2005-1945

Cross-site scripting XSS vulnerability in the converthighlitewords function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data...

CVE-2005-1474

In CVE-2005-1474, Apple Mac OS X 10.4.1’s Dashboard allows remote widget installation through Safari without user prompts, enabling execution or installation of user widgets that can override system widgets. The vulnerability stems from Safari automatically handling widget installation and widget...

CVE-2005-1911

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service news loss...

CVE-2005-1935

CVE-2005-1935 documents a heap-based buffer overflow in the BERDecBitString function of Microsoft's ASN.1 library (MSASN1.DLL). The overflow occurs when processing nested constructed bit strings, leading to a realloc of a non-null pointer and potential overwrite of freed memory, demonstrated via ...

CVE-2005-1871

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."...

CVE-2005-1887

Unknown vulnerability in the Sun Solaris C library libc and libproject in Solaris 10 allows local users to gain privileges...

CVE-2005-1472

CVE-2005-1472 affects Apple Mac OS X 10.4.1. Affected component: system call permission checks for certain directories. The issue allows local users to list files in directories that lack POSIX read permission but have execute bits set for group/other, due to insufficient enforcement of directory...

KLA10048 DoS vulnerability in AOL AIM

An integer underflow vulnerability was found in AIM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to the GIF parser via a specially designed buddy icon. Original advisories vulnerability...

FreeBSD-SA-05:11.gzip

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:11.gzip Security Advisory The FreeBSD Project Topic: gzip directory traversal and permission race vulnerabilities Category: contrib Module: gzip Announced:...

dbus security update

CentOS Errata and Security Advisory CESA-2005:102 Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between...

fonts, xorg security update

CentOS Errata and Security Advisory CESA-2005:198 Updated xorg-x11 packages that fix a security issue as well as various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.Org X11 is the X...

Moderate: Red Hat Security Advisory: xorg-x11 security update

Updated xorg-x11 packages that fix a security issue as well as various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.Org X11 is the X Window System which provides the core functionality...

CVE-2005-1909

The CVE-2005-1909 entry concerns the 602LAN SUITE 2004 web server control panel where remote attackers can disrupt administrator log readability by sending a GET request containing a

CVE-2005-0203

CVE-2005-0203 entry is rejected/not used; this ID does not represent an active vulnerability entry.

CVE-2005-1897

CVE-2005-1897 concerns FlexCast Audio Video Streaming Server prior to 2.0. A Nessus plugin (2946.PRM) and related advisories describe a remote overflow issue affecting the FlexCast server, implying a vulnerability in versions earlier than 2.0. The NVD entry assigns a HIGH severity (CVSS v2: AV:N/...