CVE-2005-0399

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer...

CVE-2005-0815

Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem...

CVE-2005-1351

The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1355

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801...

KLA10135 LPE vulnerability in DameWare

An unspecified vulnerability was found in DameWare products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories DameWare bulletin Related products DameWare-Mini-Remote-Control DameWare-NT-Utilities CVE list...

KLA10316 ACE vulnerability in Sacred

A buffer overflow was found in Sacred. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products Sacred CVE list CVE-2005-0906 high Solution Update to latest version Impacts...

KLA10405 ACE vulnerability in Xpand Rally

A format string vulnerability was found in Xpand Rally. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially defined message. Original advisories - Related products Xpand-Rally CVE list CVE-2005-0729 high Solutio...

KLA10272 ACE vulnerability in NetTerm

A buffer overflow was found in NetTerm. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed command. Original advisories - Related products NetTerm CVE list CVE-2005-1323 high Solution Update to latest...

[SECURITY] [DSA 719-1] New prozilla packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 719-1 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...

CVE-2005-1062

Kerio’s administration protocol in Kerio WinRoute Firewall <= 6.0.10, Kerio Personal Firewall <= 4.1.2, and Kerio MailServer

CVE-2005-1063

Kerio’s CVE-2005-1063 affects Kerio WinRoute Firewall (up to 6.0.10), Kerio Personal Firewall (up to 4.1.2), and Kerio MailServer (up to 6.0.8). The issue arises from abusing the administration protocol, allowing remote attackers to cause a CPU-consuming denial of service by triggering pre-authen...

Debian DSA-719-1 : prozilla - format string problems

Several format string problems have been discovered in prozilla, a multi-threaded download accelerator, that can be exploited by a malicious server to execute arbitrary code with the rights of the user running prozilla. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

RHEL 3 : PHP (RHSA-2005:405)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

Debian DSA-718-2 : ethereal - buffer overflow

This version lists the correct packages in the packages section. A buffer overflow has been detected in the IAPP dissector of Ethereal, a commonly used network traffic analyser. A remote attacker may be able to overflow a buffer using a specially crafted packet. More problems have been discovered...

Moderate: Red Hat Security Advisory: PHP security update

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

[SECURITY] [DSA 718-2] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 718-2 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 718-2] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 718-2 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 718-1] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 718-1 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...

CVE-2005-1354

CVE-2005-1354 concerns a vulnerability in the forum.pl script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The provided documents confirm this as a remote command‑execution flaw and do not specify affected vendor/product versions, mitigation...

CVE-2005-1359

CVE-2005-1359 is a Cross-site scripting (XSS) vulnerability reported in the text.cgi script, allowing remote attackers to inject arbitrary web script or HTML via the argument. The NVD entry lists a CVSSv2 base score of 4.3 (Medium) with impact on integrity (Partial) and no confidentiality/availab...