CVE-2005-1484

Golden FTP Server Pro 2.52 is vulnerable to a directory traversal flaw where a GET request containing a "\.." sequence prefixed by a """ can read files outside the share. Root cause is improper handling of backslash-dot-dot traversal, enabling reading of arbitrary files with partial confidentiali...

CVE-2005-1261

CVE-2005-1261 is a stack-based buffer overflow in Gaim's URL parsing that affects versions before 1.3.0. A remote attacker could trigger arbitrary code execution by sending an IM containing a very large URL. Public disclosures and advisories (SUSE, OpenVAS/Gentoo, Mandrake/CentOS/Ubuntu/Nessus co...

CVE-2005-1263

CVE-2005-1263 affects the Linux kernel: the elf_core_dump path in binfmt_elf.c can trigger a negative length in create_elf_tables, causing a buffer overflow that enables local attackers to execute arbitrary code. Affected: Linux kernel 2.x up to listed pre-release/rc versions across multiple line...

CVE-2005-1503

CVE-2005-1503 affects MidiCart PHP Shopping Cart. The issue comprises multiple SQL injection vulnerabilities exploitable via parameters in search_list.php (searchstring), item_list.php (maingroup, secondgroup), and item_show.php (code_no). Successful exploitation allows remote execution of arbitr...

CVE-2005-1480

CVE-2005-1480 concerns RaidenFTPD; multiple sources converge on a directory traversal flaw in the RaidenFTPD FTP server prior to 2.4.2241. An attacker can read arbitrary files outside the FTP root by supplying a ".." sequence in the urlget site command. Impact is read access to files via remote u...

remote root security bug in ethereal 0.9.13 >= and <= 0.10.10

Suresec security advisory 2 9th May 2005 CVE ID: CAN-2005-1461 Remote root vulnerability in Ethereal. About ethereal: Ethereal is a widely used network packet capturing utility which has support for over 700 network protocols. Vulnerability summary: Ethereal has a dissector for the distcc network...

PT-2005-1103 · Dan Bernstein +2 · Qmail +2

Name of the Vulnerable Software and Affected Versions: qmail affected versions not specified Description: The issue is caused by an integer overflow in the stralloc readyplus function in qmail. This allows remote attackers to cause a denial of service and possibly execute arbitrary code via a lar...

RHEL 3 / 4 : gaim (RHSA-2005:429)

An updated gaim package that fixes two security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overflow bug was found in the way...

CVE-2005-1513

CVE-2005-1513 is a known vulnerability in netqmail (qmail) involving an integer overflow in the stralloc_readyplus function when run on 64-bit platforms with large memory. This can allow a remote attacker to cause a denial of service and potentially execute arbitrary code via a large SMTP request...

RHEL 2.1 : gaim (RHSA-2005:432)

An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overfl...

Debian DSA-722-1 : smail - buffer overflow

A buffer overflow has been discovered in Smail, an electronic mail transport system, which allows remote attackers and local users to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

RHEL 4 : tcpdump (RHSA-2005:417)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:417 advisory. Tcpdump is a command-line tool for monitoring network traffic. Several denial of service bugs were found in the way tcpdump processes certain...

Mandrake Linux Security Advisory : OpenOffice.org (MDKSA-2005:082)

AD-LAB discovered a heap overflow in the StgCompObjStream::Load function when OpenOffice.org processes DOC documents. If an attacker created a malicious DOC document that contained a specially crafted header, it could execute arbitrary code with the rights of the user running OpenOffice.org. The...

CVE-2005-0039

CVE-2005-0039 describes vulnerabilities in IPsec configurations where using ESP in tunnel mode (with CBC mode) or AH without proper integrity protections allows an attacker to modify the outer packet and cause the inner, encrypted data to be exposed in plaintext via ICMP messages. The attacks inc...

Advanced Guestbook index.php entry Parameter SQL Injection

The remote host is running Advanced Guestbook - a guestbook written in PHP. The remote version of this software contains an input validation flaw leading to a SQL injection vulnerability. An attacker may exploit this flaw to execute arbitrary commands against the remote database. %NASLMINLEVEL...

[Full-disclosure] Crash in Zoidcom 1.0 beta 4

Luigi Auriemma Application: Zoidcom http://www.zoidcom.com Versions: = 1.0 beta 4 Platforms: Windows and Linux Bug: access to unallocated memory Exploitation: remote, versus server and clients Date: 10 May 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org ...

NISCC Vulnerability Advisory IPSEC - 004033

Abstract: Three attacks that apply to certain configurations of IPsec have been identified. These configurations use Encapsulating Security Payload ESP in tunnel mode with confidentiality only, or with integrity protection being provided by a higher layer protocol. Some configurations using AH to...

[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 723-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 723-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 722-1] New smail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 722-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2005 http://www.debian.org/security/faq -...