CVE-2005-1198

CVE-2005-1198 describes a directory traversal vulnerability in apexec.pl used by the Anaconda Foundation Directory. The flaw allows remote attackers to read arbitrary files by inserting hex-encoded null characters (%00) within the middle of '..' sequences in the template parameter. The NVD entry ...

CVE-2005-1197

CVE-2005-1197 is a SQL injection vulnerability in Oracle Database Server 10g affecting the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure via the CHANGE_SET_NAME parameter. Remote attackers could potentially execute arbitrary SQL commands; impact and remediation details are not specified i...

CVE-2005-1201

Summary: CVE-2005-1201 affects AZ Bulletin Board (AZBB) prior to version 1.0.08. The issue comprises two directory traversal flaws: (1) restricted to remote authenticated admin users who can delete arbitrary files via a “..” in the URL to admin_avatar.php or admin_attachment.php; (2) remote attac...

CVE-2005-0753

CVE-2005-0753 affects CVS (Concurrent Versions System). A buffer overflow in CVS processing of version/author information can allow remote code execution when a user connects to a malicious CVS server. Public advisories confirm a patch is available; Debian/FreeBSD/CentOS advisories document fixes...

CVE-2005-1199

This CVE refers to an SQL injection in UBB.Threads, specifically in printthread.php, where the main parameter is exploitable due to insufficient input validation. The vulnerability affects UBB.Threads installations that process that script (e.g., historical references to versions around 6.5.x bet...

CVE-2005-1061

The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."...

CVE-2005-1195

CVE-2005-1195 affects xine-lib before 1.0 and products using it (e.g., MPlayer 1.0pre6 and earlier). Multiple heap-based buffer overflows in MMS over TCP (MMST) and RealMedia RTSP stream handling allow remote attackers to execute arbitrary code. Impact: code execution with the user’s privileges; ...

CVE-2005-0755

CVE-2005-0755 describes a heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player prior to 10.0.4, and RealOne Player v1/v2. The flaw allows remote attackers to execute arbitrary code by sending a long hostname in a RAM file, enabling code execution and potential control of the affe...

CVE-2005-0035

The CVE-2005-0035 entry concerns the Acrobat/Acrobat Reader ActiveX web control used with Internet Explorer (versions 7.0 and earlier). The vulnerability allows a remote attacker to determine the existence of local files via the LoadFile method, effectively an information-disclosure weakness in t...

CVE-2005-1196

CVE-2005-1196: SQL injection in phpBB Knowledge Base module kb.php via the cat parameter due to improper input sanitization. This allows remote attackers to modify SQL queries and potentially access sensitive data. Affected component is the Knowledge Base module for phpBB; the vulnerability is do...

CVE-2005-1204

Desktop Rover 3.0 (and possibly earlier versions) is affected by a vulnerability that allows remote attackers to cause a denial of service (application crash) by sending a crafted packet to TCP port 61427, triggering an invalid memory access. The available sources confirm the affected product and...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

CVE-2005-1200

AZ Bulletin Board (AZBB) < 1.0.07d is affected by a PHP remote file inclusion in main_index.php (AZBB 1.0.07a–c) via dir_src or abs_layer parameters, enabling arbitrary PHP code execution on a remote server. The official CVE entry (CVE-2005-1200) documents RSF/URL-based code inclusion in AZBB....

RHEL 4 : RealPlayer (RHSA-2005:363)

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides solid media playback locally and via streaming. It plays RealAudio,...

Sun Java System Web Proxy Server Unspecified Remote Overflow

The remote host is running the SunOne Web Proxy. This version is reported vulnerable to a number of remote buffer overflows. Alledgedly, successful exploitation would result in the attacker executing arbitrary commands on the remote SunOne Web Proxy server. C Tenable Network Security, Inc. includ...

RHEL 3 : RealPlayer (RHSA-2005:394)

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player providing solid media playback locally and via streaming. It plays RealAudio,...

SUSE-SA:2005:027: postgresql

The remote host is missing the patch for the advisory SUSE-SA:2005:027 postgresql. Several problems were identified and fixed in the PostgreSQL database server. Multiple buffer overflows in the low level parsing routines may allow attackers to execute arbitrary code via: 1 a large number of...

RHEL 4 : HelixPlayer (RHSA-2005:392)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:392 advisory. HelixPlayer is a media player. A buffer overflow bug was found in the way HelixPlayer processes RAM files. An attacker could create a specially crafte...

logwatch security update

CentOS Errata and Security Advisory CESA-2005:364-01 An updated logwatch package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. LogWatch is a customizable log analysis system. LogWatch...

Mac OS X Security Update 2005-004

The remote host is missing Security Update 2005-004. This security update contains security fixes for the following application : - iSync local privilege escalation TRUSTED...