CVE-2005-1775

CVE-2005-1775 affects Terminator 3: War of the Machines (game) versions 1.16 and earlier. The vulnerability allows remote attackers to trigger a denial-of-service (application crash) by sending a large nickname. Public exploitation details are not provided in the supplied documents. No remediatio...

CVE-2005-1787

setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable...

CVE-2005-1781

CVE-2005-1781 affects MailEnable SMTP authentication. The vulnerability is a buffer overflow in handling the AUTH LOGIN command, allowing a remote unauthenticated attacker to terminate the service or potentially execute arbitrary code with SYSTEM privileges. Impact includes denial of service and ...

CVE-2005-1773

CVE-2005-1773 concerns multiple unknown vulnerabilities in L-Soft LISTSERV versions 14.3, 1.8e, and 1.8d. The remote vulnerability vector targets the Listserv web interface CGI, enabling remote attackers to execute arbitrary code or cause a denial of service. The provided connected documents conf...

CVE-2005-1778

CVE-2005-1778 describes a cross-site scripting (XSS) vulnerability in PostNuke 0.750, exploitable via the start parameter in readpmsg.php. The affected component is readpmsg.php within PostNuke, enabling remote attackers to inject arbitrary web script or HTML. The available connected documents co...

CVE-2005-1796

Format string vulnerability in the cursesmsg function in the Ncurses interface eccurses.c for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code...

CVE-2005-1779

The CVE-2005-1779 entry is supported by multiple connected sources describing a SQL injection in MaxWebPortal’s password.asp (memKey parameter) across versions 1.35, 1.36, 2.0, and 20050418 Next. The root cause is improper sanitization of input passed to memKey, allowing remote attackers to modif...

CVE-2005-1773

Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: this candidate may be SPLIT in the future when more precise technical details become available...

Zeroboard 4.1 preg_replace Remote nobody Shell Exploit

No description provided by source. / ---------------------------------------------------------------------------------- + Zeroboard pregreplace vulnerability Remote nobody shell exploit ---------------------------------------------------------------------------------- by n0gada [email protected]...

Microsoft Windows - COM Structured Storage Local (MS05-012)

// by Cesar Cerrudo - Argeniss - www.argeniss.com // MS05-012 - COM Structured Storage Vulnerability - CAN-2005-0047 Exploit // // More exploits at www.argeniss.com/products.html // // Works on Win2k sp4, WinXP sp2, Win2k3 sp0 // Close all runing programs to avoid possible problems // If it finds...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

RHEL 3 : kernel (RHSA-2005:472)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

RHEL 4 : mozilla (RHSA-2005:435)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:435 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs were found in the...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2005:427)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

Fedora Core 3 : kernel-2.6.11-1.27_FC3 (2005-392)

Tue May 17 2005 Dave Jones - Remove the unused and outdated Xen patches from the FC3 tree. - Mon May 16 2005 Dave Jones - Rebase to 2.6.11.10, fixing CVE-2005-1264 - Thu May 12 2005 Dave Jones - Rebase to 2.6.11.9, fixing CVE-2005-1263 - Tue May 10 2005 Dave Jones - Fix two bugs in x86-64 page...

USN-135-1: gdb vulnerabilities

Tavis Ormandy found an integer overflow in the GNU debugger. By tricking an user into merely load a specially crafted executable, an attacker could exploit this to execute arbitrary code with the privileges of the user running gdb. However, loading untrusted binaries without actually executing th...

[SECURITY] [DSA 730-1] New bzip2 packages fix file unauthorised permissions modification

-------------------------------------------------------------------------- Debian Security Advisory DSA 730-1 [email protected] http://www.debian.org/security/ Martin Schulze May 27th, 2005 http://www.debian.org/security/faq -...

CVE-2005-1787

setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable...

fusion_v3.6.1_exploit.txt

? $copyr = " !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! oooo...oooo.oooooooo8.ooooooooooo .8888o..88.888........88..888..88 .88.888o88..888oooooo.....888 .88...8888.........888....888 o88o....88.o88oooo888....o888o Network security team nst.void.ru Title: Fusion News v3.6.1...

Listserv < 14.3-2005a Multiple Vulnerabilities

According to its version number, the Listserv web interface on the remote host suffers from several critical and as-yet unspecified vulnerabilities. An attacker may be able to exploit these flaws to execute arbitrary code on the affected system or allow remote denial of service. %NASLMINLEVEL 703...