10535 matches found
CVE-2005-0594
The CVE-2005-0594 issue is a local buffer overflow in Apple Mac OS X Server’s NeST (NetInfo Setup Tool) triggered by an overly long -target command-line argument. The flaw allows a local user to execute arbitrary code with the NeST process’s privileges (typically root). Apple addressed this with ...
CVE-2005-1337
Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI...
CVE-2005-1341
Apple Terminal 1.4.4 is affected by CVE-2005-1341, with the issue allowing execution of arbitrary commands via terminal escape sequences. The vulnerability concerns Terminal and related escape handling in macOS components; the initial description explicitly names Terminal 1.4.4 as vulnerable to c...
[Full-disclosure] iDEFENSE Security Advisory 05.03.05: Mac OS X Server NeST -target Buffer Overflow Vulnerability
Mac OS X Server NeST -target Buffer Overflow Vulnerability iDEFENSE Security Advisory 05.03.05: http://www.idefense.com/application/poi/display?id=239&type=vulnerabilit ies May 03, 2005 I. BACKGROUND Mac OS X is an advanced operating system which blends features of UNIX with the ease-of-use of th...
Interspire articlelive 2005 - Multiple Vulnerabilities
Interspire articlelive 2005 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/13493/info Interspire ArticleLive is reportedly prone to multiple vulnerabilities. These issues may allow a remote attacker to gain administrative access to the application and carry out various...
RHEL 4 : evolution (RHSA-2005:397)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:397 advisory. Evolution is a GNOME-based collection of personal information management PIM tools. A bug was found in the way Evolution displays mail...
RHEL 4 : nasm (RHSA-2005:381)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:381 advisory. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM file in such a way...
RHEL 4 : PHP (RHSA-2005:406)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:406 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP processes IFF and JP...
[Full-disclosure] Local root vuln in VPN daemon on MacOS X
Local root vulnerability in vpnd on MacOS X = 10.3.9 ----------------------------------------------------- Overview -------- There exists a local root exploitable stack based buffer overflow in the VPN daemon shipping with MacOS X. This bug can be easily exploited to gain root access. This...
Debian DSA-720-1 : smartlist - wrong input processing
Jeroen van Wolffelaar noticed that the confirm add-on of SmartList, the listmanager used on lists.debian.org, which is used on that host as well, could be tricked to subscribe arbitrary addresses to the lists. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Interspire articlelive 2005 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/13493/info Interspire ArticleLive is reportedly prone to multiple vulnerabilities. These issues may allow a remote attacker to gain administrative access to the application and carry out various cross-site scripting attacks. Interspire ArticleLive 2005 is...
[SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription
-------------------------------------------------------------------------- Debian Security Advisory DSA 720-1 [email protected] http://www.debian.org/security/ Martin Schulze May 3rd, 2005 http://www.debian.org/security/faq -...
CVE-2005-1417
MaxWebPortal 2.x, 1.35 and related versions are affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to inject arbitrary SQL via numerous ASP scripts (article_popular.asp, dl_popular.asp, links_popular.asp, pic_popular.asp, article_rate.asp, dl_rate.asp, links_rate...
CVE-2005-1414
ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the Windows registry, enabling local privilege escalation for a logged-in attacker. The vulnerability stems from insecure storage of credentials in registry keys, with impact described as part...
CVE-2005-1421
CVE-2005-1421 describes a directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta. The flaw allows remote attackers to read arbitrary files via ".." sequences in an HTTP request. Affected software/version: Raysoft/Raybase Video Cam Server 1.0.0 beta. Root cause: insuffici...
CVE-2005-1449
CVE-2005-1449 refers to an unknown vulnerability in serendipity_config_local.inc.php affecting Serendipity prior to 0.8. The connected documents consistently state the impact is unknown and do not provide concrete technical details, affected versions beyond “before 0.8,” or remediation steps. No ...
CVE-2005-0157
CVE-2005-0157 affects SmartList’s confirm add-on (3.15 and earlier). The issue allows an attacker to subscribe arbitrary e-mail addresses by exploiting a valid cookie that encodes a different address than the one tied to the cookie. Public advisories (Debian DSA-720-1) note this as a remote input...
CVE-2005-1415
GlobalSCAPE Secure FTP Server (3.0.2 and earlier) is affected by a buffer overflow caused by mishandling user-supplied input, allowing remote code execution after sending a long FTP command. Some sources note that all versions prior to 3.0.3 are vulnerable; exploitation requires a valid user acco...
CVE-2005-1431
The CVE-2005-1431 issue affects GnuTLS: record packet parsing bug in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 can allow a remote attacker to cause a denial-of-service via crafted TLS handshakes (padding bytes in gnutils_cipher.c). The vulnerability is rated CVSS v2 base 5.0 (Network attack, ...
