Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager,...

Moderate: Red Hat Security Advisory: cvs security update

An updated cvs package that fixes security bugs is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes...

CVE-2005-1247

Affected software: Novell Nsure Audit 1.0.1 (webadmin.exe). Vulnerable component: ASN.1/SSL handling when processing client certificates to an SSL server. Root cause: malformed ASN.1 packets trigger a denial of service (as demonstrated via an OpenSSL ASN.1 parsing vulnerability). No remediation d...

CVE-2005-1246

The CVE-2005-1246 entry describes a format-string vulnerability in the snmppd_log function of snmppd_util.c for snmppd 0.4.5 and earlier. The vulnerability may allow remote attackers to cause a denial of service or execute arbitrary code due to unhandled format specifiers in a syslog call. Affect...

RHEL 4 : openoffice.org (RHSA-2005:375)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:375 advisory. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula...

RHEL 4 : cvs (RHSA-2005:387)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:387 advisory. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes version and author...

CVE-2005-1237

Vulnerability summary (CVE-2005-1237) : The issue affects FlexPHPNews 0.0.3, specifically the news.php component. It is a SQL injection vulnerability exploitable via the newsid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD metadata reports a network-facing vector...

CVE-2005-1231

Cross-site scripting XSS vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the 1 term or 2 description...

CVE-2005-0754

CVE-2005-0754 affects KDE’s Kommander: KDE 3.2–3.4.0 allows remote attackers to cause arbitrary code execution by Kommander executing data files without user confirmation. The root cause is untrusted data/file handling by Kommander, enabling remote code execution if a user opens a malicious file....

CVE-2005-1240

The CVE-2005-1240 entry describes a directory traversal vulnerability in Castlehill’s third-party tool used to secure the iSeries AS/400 FTP server. Attackers could access arbitrary files (including from qsys.lib) by crafting GET requests containing ".." sequences. The provided description does n...

CVE-2005-1233

The CVE-2005-1233 issue concerns an XSS vulnerability in the PHP Labs proFile product’s index.php, exploitable via the (1) dir and (2) file parameters. The root cause is unsanitized input leading to arbitrary script/HTML injection in responses. Impact is remote code/input manipulation potential f...

CVE-2005-1241

CVE-2005-1241 describes a directory traversal in the Powertech third‑party tool used with the iSeries AS/400 FTP server, enabling remote access to arbitrary files (including those in qsys.lib) via ".." in GET requests. The initial and connected records present no explicit patch or version details...

CVE-2005-1239

CVE-2005-1239 describes a directory-traversal flaw in Raz‑Lee’s third‑party tool used with the iSeries (AS/400) FTP server. The vulnerability allows remote attackers to access arbitrary files, including those in qsys.lib, by sending crafted "." sequences in a GET request. Publicly available refer...

CVE-2005-0754

Removed by vendor...

CVE-2005-1243

CVE-2005-1243 describes a directory traversal vulnerability in a third‑party SafeStone tool used to secure the iSeries AS/400 FTP server. The issue allows remote attackers to access arbitrary files (including those under qsys.lib) via ".." sequences in a GET request, due to a canonicalization/pat...

CVE-2005-1231

CVE-2005-1231 – JAWS 0.4 XSS in GlossaryModel.php . The issue arises in the NewTerm function of GlossaryModel.php where improper validation of user-supplied input (term and description) enables remote injection of arbitrary web script/HTML. This vulnerability is corroborated by multiple sources i...

CVE-2005-1234

CVE-2005-1234 : Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the u parameter to auction_rating.php or (2) the ar parameter to action_offer.php. These entries describe the affected product as phpbb-Auction and identify the...

CVE-2005-1246

Format string vulnerability in the snmppdlog function in snmppdutil.c for snmppd 0.4.5 and earlier may allow remote attackers to cause a denial of service or execute arbitrary code via format string specifiers that are not properly handled in a syslog call...

CVE-2005-0135

Technical details for CVE-2005-0135 are not publicly provided in the connected documents. The sources reference kernel updates and include CVE lists, but do not specify affected products/versions, root cause, impact, or remediation. Monitor for updates.

CVE-2005-1236

CVE-2005-1236 affects DUportal DUportal 3.1.2 (and related 3.1.2 SQL) with multiple SQL injection vectors (iChannel to channel.asp/search.asp; iData to detail.asp/inc_rating.asp; iCat to detail.asp/type.asp; DAT_PARENT to inc_poll_voting.asp; iRate to inc_rating.asp). Root cause: improper input h...