CVE-2005-1270

The CVE-2005-1270 entry concerns Rootkit Hunter before 1.2.3-r1, where the check_update.sh and rkhunter scripts create temporary files with predictable names. This enables local users to overwrite arbitrary files via a symlink attack. The provided documents do not specify affected OS/Vendor versi...

CVE-2005-1348

CVE-2005-1348 corresponds to a buffer overflow in MailEnable’s HTTPMail service. Concrete details: affected products are MailEnable Enterprise (versions 1.04 and earlier) and MailEnable Professional (versions 1.54 and earlier). The overflow occurs via a long HTTP Authorization header, allowing a ...

CVE-2005-1360

The CVE-2005-1360 issue affects GrayCMS 1.1 and concerns a PHP remote file inclusion in error.php. The underlying problem is that the path_prefix parameter can be manipulated to reference a URL on a remote server that contains executable PHP code, enabling remote code execution. The connected doc...

CVE-2005-1353

The CVE-2005-1353 issue affects the forum.pl script, where remote attackers can cause the system to read arbitrary files by supplying a full pathname as an argument. This is the explicit vulnerability described in the CVE record and corroborated by NVD entries. The available data provide a CVSSv2...

CVE-2005-1347

Affected software: Adobe Acrobat Reader prior to version 7 (i.e., 6.0 and earlier). Vulnerability description in connected PT-2005-2349 indicates the issue could allow denial of service and memory modification via a crafted PDF, potentially enabling arbitrary code execution, but the vendor report...

CVE-2005-1352

CVE-2005-1352 describes an XSS vulnerability in the ad.cgi script that allows remote attackers to inject arbitrary web script or HTML via the argument. Evidence comes from NVD/CVE records; the exact affected product, version, and root cause details beyond “ad.cgi script” are not specified in the ...

CVE-2005-1351

CVE-2005-1351 concerns the ad.cgi script, which allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, no authentication, and partial impacts to confidentiality, in...

CVE-2005-1355

CVE-2005-1355 affects includer.cgi in The Includer and enables remote attackers to read arbitrary files by supplying a full pathname in the argument (a directory traversal issue). The connected record for CVE-2005-0801 confirms the pattern: directory traversal via .. or a full pathname in the URL...

CVE-2005-1364

CVE-2005-1364 describes multiple SQL injection vulnerabilities in MetaBid Auctions that allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp. The initial and connected documents confirm a SQLi ...

CVE-2005-1361

CVE-2005-1361 describes multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 (ASP) that allow remote attackers to execute arbitrary SQL via the parameters intProdID (in product.asp) or strCatalog_NAME (in productsByCategory.asp). The vulnerability affects the remote web application’s dat...

CVE-2005-1354

The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1347

UNVERIFIABLE NOTE: this issue describes a problem that can not be independently verified as of 20050421. Adobe Acrobat reader AcroRd32.exe 6.0 and earlier allows remote attackers to cause a denial of service "Invalid-ID-Handle-Error" error and modify memory beginning at a particular address,...

CVE-2005-1358

CVE-2005-1358 describes a vulnerability in a text.cgi script that allows remote attackers to execute arbitrary commands by injecting shell metacharacters in the argument. The provided documents do not specify the affected product, vendor, version, or root cause beyond the general command injectio...

CVE-2005-1349

CVE-2005-1349 affects the Perl Convert::UUlib (Convert-UUlib) library. A buffer overflow in the library’s handling of read parameters allows remote attackers to execute arbitrary code. Affected version range is prior to 1.051; upgrading to 1.051 fixes the issue (as cited by multiple advisories an...

CVE-2005-1356

The CVE-2005-1356 refers to a Cross-site scripting (XSS) vulnerability in the includer.cgi script of The Includer. The flaw allows remote attackers to inject arbitrary web script or HTML via the argument, enabling ability to execute/script content in a victim’s browser. The available references d...

CVE-2005-1357

The CVE-2005-1357 entry concerns a vulnerability in a text.cgi script that allows remote attackers to read arbitrary files by supplying a full pathname in the argument. The underlying flaw is unrestricted file access via the argument, enabling disclosure of sensitive data from the server. The con...

CVE-2005-1345

CVE-2005-1345 affects Squid up to version 2.5.STABLE9, where missing or invalid http_access ACLs do not trigger a fatal error, potentially allowing broader access than intended. The initial description explicitly notes the ACL error in Squid’s http_access handling. Connected advisories identify a...

US-CERT Technical Cyber Security Alert TA05-117A -- Oracle Products Contain Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA05-117A Oracle Products Contain Multiple Vulnerabilities Original release date: April 27, 2005 Last revised: -- Source: US-CERT Systems Affected From the Oracle Critical Patch Update - April 2005: Oracle Database 10g...

Debian DSA-717-1 : lsh-utils - buffer overflow, typo

Several security relevant problems have been discovered in lsh, the alternative secure shell v2 SSH2 protocol server. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2003-0826 Bennett Todd discovered a heap buffer overflow in lshd which could lead...

[SECURITY] [DSA 717-1] New lsh packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 717-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...