Rakkarsoft RakNet 2.33 - Remote Denial of Service

source: https://www.securityfocus.com/bid/13862/info Rakkarsoft RakNet is affected by a remote denial of service vulnerability. Reportedly, the vulnerability presents itself when the library handles an empty UDP packet. RakNet 2.33 and prior versions released before May 30, 2005 are affected by...

[SECURITY] [DSA 732-1] New mailutils packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 732-1 [email protected] http://www.debian.org/security/ Martin Schulze June 3rd, 2005 http://www.debian.org/security/faq -...

CVE-2005-1334

CVE-2005-1334 is rejected/not used; it is a duplicate of CVE-2005-1579 and not an active vulnerability entry.

CVE-2005-1334

...

CVE-2005-1847

YaMT before 0.5_2 is affected by multiple buffer overflows in the rename and sort options, enabling arbitrary code execution. The CVE is supported by multiple sources (NVD, Red Hat, SUSE, FreeBSD VuXML) confirming the same root cause and impact. Affected component: YaMT, vulnerable versions prior...

CVE-2005-1846

CVE-2005-1846 affects YaMT prior to 0.5_2. Affected component/file handling allows directory traversal via the rename and sort options, enabling an attacker to overwrite arbitrary files. Some sources also note potential arbitrary code execution in affected contexts. Remediation: upgrade YaMT to v...

CVE-2005-1831

Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo...

CVE-2005-1840

CVE-2005-1840 describes a directory traversal vulnerability in phpCMS 1.2.x before 1.2.1pl2, where an attacker can read or include arbitrary files by manipulating the language parameter to parser.php (via a .. path traversal). Affects phpCMS 1.2.x line; vulnerability demonstrated by using a dot-d...

CVE-2005-1824

The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...

CVE-2005-1836

CVE-2005-1836 affects NEXTWEB (i)Site. The vulnerability allows remote attackers to cause a denial of service (HTTP 500) by sending a crafted request, potentially involving wildcard requests for .jsp files. The description, sources, and CVE listings confirm the impact is a partial availability de...

CVE-2005-1827

The CVE-2005-1827 issue affects the D-Link DSL-504T, where an unauthenticated remote attacker can bypass authentication by sending a direct request to the firmwarecfg endpoint. This allows privilege escalation to perform actions such as upgrading firmware, restarting the router, or restoring a sa...

CVE-2005-1834

The CVE-2005-1834 entry describes a SQL injection vulnerability in NEXTWEB (i)Site, specifically in login.asp. The underlying issue is unsanitized input in the password field, enabling remote attackers to execute arbitrary SQL commands and bypass authentication. The available connected documents ...

CVE-2005-1829

Microsoft Internet Explorer 6 SP2 is affected by CVE-2005-1829. The vulnerability allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedded files that call each other. The available sources describe the issue at a high level (DoS through crafted e...

CVE-2005-1831

CVE-2005-1831 refers to Sudo 1.6.8p7 on SuSE Linux 9.3 (and possibly other distros) where local users could gain privileges by using sudo to run su, then entering a blank password and pressing CTRL-C. Several researchers could not reproduce the issue, noting that Sudo catches SIGINT and returns a...

CVE-2005-1838

The CVE-2005-1838 entry concerns Liberum Help Desk 0.97.3, where multiple cross-site scripting vulnerabilities exist in castnewPost.asp. The flaw permits remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields. The NVD entry lists a Medium s...

CVE-2005-1828

CVE-2005-1828 affects D-Link DSL-504T. The root cause is that usernames and passwords are stored in cleartext in the router configuration file, enabling remote retrieval of sensitive data without authentication. Public documents confirm the affected device and exposure, but do not provide an offi...

CVE-2005-1824

The sqlescapestring function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "" backslash character, which is used as an escape character and makes the module vulnerable to SQL injection attacks...

CVE-2005-1833

CVE-2005-1833 describes multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4. The vulnerabilities allow remote attackers to execute arbitrary SQL commands through specific parameters in various scripts, including: calendar.php (eid), online.php (idsql), memberlist.php (userse...

CVE-2005-1824

CVE-2005-1824 affects GNU Mailutils when built with the mysql or postgres USE flag: the sql_escape_string function in the mailutils auth/sql.c module fails to properly escape the backslash, enabling SQL command injection. Impact: a remote attacker could inject SQL commands into the underlying dat...

CVE-2005-1826

CVE-2005-1826 affects HP Radia Notify Daemon (versions 2.x, 3.x, 4.x; formerly Novadigm) where a buffer overflow via a long file extension allows a remote attacker to execute arbitrary code. The description specifies remote code execution but does not provide exploit code or in-the-wild details. ...