CVE-2005-1466

The CVE-2005-1466 entry refers to a vulnerability in Ethereal’s DICOM dissector that could cause a denial of service via a large memory allocation in versions prior to 0.10.11. Remediation exists in updating to Ethereal 0.10.11, as reflected in Red Hat/CentOS advisories (RHSA-2005:427, CESA-2005:...

CVE-2005-1459

Ethereal (now Wireshark) has multiple remote‑code-execution/denial of service vulnerabilities in its dissectors (WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, SMB PIPE) prior to version 0.10.11. The CVE set CVE-2005-1456 through CVE-2005-1470 is cited for these issues....

CVE-2005-1467

Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service memory exhaustion via unknown vectors...

USN-118-1: PostgreSQL vulnerabilities

It was discovered that unprivileged users were allowed to call internal character conversion functions. However, since these functions were not designed to be safe against malicious choices of argument values, this could potentially be exploited to execute arbitrary code with the privileges of th...

Low: Red Hat Security Advisory: nasm security update

An updated nasm package that fixes multiple security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM...

CVE-2005-1339

CVE-2005-1339 affects Mac OS X 10.3.9 where lukemftpd allows remote authenticated users to escape the chroot by logging in with their full name. The issue is rooted in lukemftpd’s chroot handling. Impact: enables escape from a restricted root environment (as described in the CVE entry and corrobo...

CVE-2005-1335

The CVE-2005-1335 issue affects Mac OS X 10.3.9 where local users can gain elevated privileges by abusing chpass/chfn/chsh, which invoke external helper programs insecurely. The CERT advisory (VU-331694) states the Directory Services utilities may execute external programs with administrative pri...

CVE-2005-1337

Technical details for CVE-2005-1337 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-1343

CVE-2005-1343: Mac OS X vpnd vulnerability. A stack-based buffer overflow in the VPN daemon (vpnd) before 10.3.9 allows a local, authenticated user to execute arbitrary code with root privileges by supplying a long -i Server_id argument. This affects the vpnd component and is triggered when Serve...

CVE-2005-1340

CVE-2005-1340 concerns the HTTP proxy service in Apple Mac OS X Server Admin (Mac OS X 10.3.9). The description in multiple sources states that the proxy does not restrict access when enabled, allowing remote users to misuse the proxy. Connected documents corroborate that this is a remote-access ...

CVE-2005-1339

lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name...

CVE-2005-1333

CVE-2005-1333 describes a Directory traversal vulnerability in the Bluetooth OBEX services of Mac OS X 10.3.9, allowing remote attackers to read arbitrary files. The issue affects Bluetooth file/OBEX handling and arises from improper path handling. In practice, exploitation would enable unauthori...

CVE-2005-1342

The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...

CVE-2005-1333

Directory traversal vulnerability in the Bluetooth file and object exchange OBEX services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files...

CVE-2005-1332

CVE-2005-1332 pertains to Mac OS X 10.3.9, where Bluetooth is enabled by default and the Bluetooth file exchange service may be active without user notification. This allows remote attackers to access files and local users to access files via the default transfer directory. Apple addressed the is...

CVE-2005-1338

CVE-2005-1338 affects Mac OS X 10.3.9. When using an LDAP server that does not implement ldap_extended_operation, initial LDAP passwords for new accounts may be stored in plaintext. The Red Hat security entry confirms the same description. The available documents do not specify affected subcompon...

CVE-2005-1336

CVE-2005-1336 is a local buffer overflow vulnerability in the Mac OS X Foundation Framework (v10.3.9) caused by improper handling of environment variables. The vulnerability allows local users to potentially execute arbitrary code with elevated privileges due to a faulty environment-variable proc...

CVE-2005-1330

CVE-2005-1330 affects Apple Mac OS X 10.3.9 AppKit: processing malformed TIFF images can cause NXSeek to offset incorrectly, leading to an unhandled exception and a denial-of-service (Cocoa application crash). The CERT/NVD entries describe the impact as an unauthenticated remote-triggered DoS via...

CVE-2005-1331

CVE-2005-1331 concerns the AppleScript Editor in Mac OS X 10.3.9, where AppleScript: URI handling fails to display the intended code, potentially allowing a remote attacker to persuade the user to run malicious code via URI characters like NULL or control characters. The connected sources corrobo...

CVE-2005-1342

CVE-2005-1342 affects Apple Terminal on Mac OS X 10.3.9 where the x-man-page URI handler fails to sanitize terminal escape sequences, enabling remote command execution. The underlying issue is lack of input sanitization for x-man-page URIs, which could lead to arbitrary commands executed in the T...