CVE-2005-1570

forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability...

CVE-2005-1584

The CVE-2005-1584 entry describes a Cross-site scripting (XSS) vulnerability in Quick.Forum 2.1.6, exploitable via the topic field in a NewTopic action within index.php. The underlying issue is an XSS allowance in the input handling, enabling remote attackers to inject arbitrary web script or HTM...

CVE-2005-1547

CVE-2005-1547 : BakBone NetVault is affected by a heap-based buffer overflow in the demo version (and possibly other versions) that allows a remote attacker to execute arbitrary commands by sending a large packet to port 20031. The vulnerability is rated CVSSv2 base 7.5 (HIGH) with network access...

Xerox Document Centre Web Server Unspecified Unauthorized Access (XRX05-003)

According to its model number and software version, the remote host is a Xerox Document Centre or WorkCentre device with an embedded web server that could allow unauthorized access to the web server directory structure, which in turn could enable a remote attacker to gain access rights and to mak...

CVE-2005-0758

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script...

CVE-2005-0758

The CVE-2005-0758 issue affects gzip prior to 1.3.5, where zgrep does not properly sanitize file arguments, allowing local users to inject filenames into a sed script and execute arbitrary commands. Connected advisories confirm related issues (CVE-2005-0988 and CVE-2005-1228) in gunzip/bzip2 work...

CVE-2005-1531

CVE-2005-1531 affects Mozilla Firefox <= 1.0.3 and Mozilla Suite

CVE-2005-1579

Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition .qtz file that uses certain patches to read local information, then other patches to send the information to the attacker...

CVE-2005-0972

CVE-2005-0972 corresponds to an integer overflow in the Mac OS X 10.3.9 and earlier searchfs system call, enabling a local attacker to execute arbitrary code via crafted parameters. The issue affects Mac OS X 10.3.x up to 10.3.9 and is documented across multiple sources (NVD, Red Hat CVE entry, C...

CVE-2005-0973

CVE-2005-0973 affects Mac OS X 10.3.9 and earlier. The issue is in the setsockopt system call and allows local users to cause a denial of service via crafted arguments, resulting in memory exhaustion. In the connected documents, the description consistently states a local, memory-exhaustion impac...

CVE-2005-1532

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160...

CVE-2005-0969

CVE-2005-0969 affects Mac OS X prior to 10.3.9: a heap-based buffer overflow in the syscall emulation functionality allows local users to trigger a denial of service (kernel panic) and potentially execute arbitrary code via crafted parameters. Remediation documented in Mac OS X 10.3.9; users shou...

CVE-2005-1271

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1343. Reason: This candidate is a reservation duplicate of CVE-2005-1343. Notes: All CVE users should reference CVE-2005-1343 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-0971

The CVE-2005-0971 entry describes a stack-based buffer overflow in the semop system call on Mac OS X 10.3.9 and earlier that enables local privilege escalation via crafted arguments. Impact is local privilege gain; CVSSv2 base score 4.6 (Medium). Affected: Mac OS X 10.3.x before 10.3.9. Root caus...

CVE-2005-1271

...

CVE-2005-1271

CVE-2005-1271 is a reservation duplicate of CVE-2005-1343 and should not be used as an active entry. The concrete vulnerability is CVE-2005-1343: a stack-based buffer overflow in the Mac OS X VPN daemon vpnd (Server_id via -i) allows a local user to execute arbitrary code with root privileges on ...

CVE-2005-1531

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using 1 a javascript: URL in a view-source: URL, 2 a javascript: URL in a...

CVE-2005-0974

CVE-2005-0974 concerns Mac OS X 10.3.9 and earlier, where an issue in the nfs_mount call is described as an unknown vulnerability that allows local users to gain privileges via crafted arguments. This is documented across multiple sources (NVD, CVE List) with the same description. The available c...

RHEL 4 : openmotif (RHSA-2005:412)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:412 advisory. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer overflow flaw was found in libXpm, which...

gaim security update

CentOS Errata and Security Advisory CESA-2005:429 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-May/073801.html https://lists.centos.org/pipermail/centos-announce/2005-May/073802.html...