CVE-2005-1830

The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of service application crash via an invalid Debug Message pointer...

CVE-2005-1830

The CVE-2005-1830 entry concerns the DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2. Affected component: DbgMsg.sys via an invalid Debug Message pointer, enabling remote DoS (application crash). Impact: partial availability, no confidentiality/ integrity impact per the record. Ro...

CVE-2005-1906

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available...

RHEL 4 : postgresql (RHSA-2005:433)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:433 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions,...

RHEL 4 : gnutls (RHSA-2005:430)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:430 advisory. The GnuTLS library implements Secure Sockets Layer SSL v3 and Transport Layer Security TLS v1 protocols. A denial of service bug was found in the GnuT...

RHEL 4 : openssl (RHSA-2005:476)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:476 advisory. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength...

postgresql, rh security update

CentOS Errata and Security Advisory CESA-2005:433 Updated postgresql packages that fix several security vulnerabilities and risks of data loss are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...

gnutls security update

CentOS Errata and Security Advisory CESA-2005:430 Updated GnuTLS packages that fix a remote denial of service vulnerability are available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library...

Moderate: Red Hat Security Advisory: gnutls security update

Updated GnuTLS packages that fix a remote denial of service vulnerability are available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library implements Secure Sockets Layer SSL v3 and Transport Laye...

CVE-2005-1819

The CVE-2005-1819 entry concerns NikoSoft WebMail before version 0.11.0, where a cross-site scripting (XSS) flaw exists that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The vulnerability affects the WebMail component as described in multiple sources (e.g., ...

CVE-2005-1800

JAWS Glossary Gadget XSS (CVE-2005-1800) affects versions 0.4–0.5.1. The flaw stems from inadequate validation of user input in the GlossaryModel/view term handling for the term parameter to index.php, allowing remote script/HTML injection via XSS. Impact is web-based cross-site scripting; exploi...

CVE-2005-1806

Peercast is affected by a format-string vulnerability (CVE-2005-1806) in versions 0.1211 and earlier. The flaw allows remote attackers to execute arbitrary code or crash the server by sending specially crafted URLs, with the attacker’s privileges typically equal to the user running Peercast. Publ...

CVE-2005-1788

SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter...

CVE-2005-1808

CVE-2005-1808 affects Firefly Studios Stronghold 2,

CVE-2005-1807

PHPMailer contains a DoS vulnerability in the Data function of class.smtp.php, affecting PHPMailer 1.7.2 and earlier. A crafted long header field can trigger an infinite loop, leading to memory and CPU consumption and potential service disruption. The OpenVAS entry corroborates a long-header DoS ...

CVE-2005-1815

CVE-2005-1815: In Hummingbird Connectivity InetD, buffer overflows in the LPD (LPDw.exe) and FTPD (ftpdw.exe) daemons allow denial of service and potentially arbitrary code execution via a long FTP command or a flood of data to LPD. Public references (SAINT advisories, Exploit-DB, Metasploit modu...

CVE-2005-1817

Invision Power Board (IPB) versions 1.0–1.3 are affected by a vulnerability in index.php that allows remote attackers to edit arbitrary forum posts by sending a modified request. The issue is triggered via direct parameter manipulation in a HTTP request to index.php, enabling an attacker to alter...

CVE-2005-1820

Zeroboard zboard.php in versions 4.1pl2–4.1pl5 is affected by CVE-2005-1820: improper quoting in preg_replace allows remote attackers to execute arbitrary PHP code. Impact is remote code execution; no specific patch/version remediation is provided in the supplied documents. Exploitation details a...

CVE-2005-1791

CVE-2005-1791 affects Microsoft Internet Explorer 6 SP2 (build 6.0.2900.2180). The issue is a crash of URLMON.DLL when a user attempts to add a URI to the restricted zone whose full domain begins with a numeric sequence that looks like an IP address. The vulnerability is documented across CVE lis...

CVE-2005-1794

Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, enabling remote attackers to spoof server public keys and perform MITM. The root cause is improper verification during key exchange, allowing an attacker ...