CVE-2005-1053

CVE-2005-1053 affects ModernBill 4.3.0 and earlier. Vulnerable component: orderwiz.php; exploitation via parameters (c_code or aid) allows remote attackers to inject arbitrary web script/HTML (XSS). The consolidated sources describe XSS risk in the affected script and parameter vectors; no specif...

CVE-2005-1049

Summary: CVE-2005-1049 describes multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC3 (and related RC4 variants) where an attacker can inject arbitrary HTML/JavaScript via the module parameter to admin.php or the op parameter to user.php. The issue is noted to exist when the ...

CVE-2005-1076

CVE-2005-1076 describes a cross-site scripting (XSS) vulnerability in the WebCT Campus Edition 4.1 discussion board, allowing an attacker to inject arbitrary script/HTML via the message field. The connected Red Hat and CVE-2008-1225 records corroborate XSS in WebCT 4.1.5.8 and note potential over...

CVE-2005-1047

CVE-2005-1047 concerns a vulnerability in the phpBB 2.0.x up.php file upload mod. The issue is that the upload script does not properly restrict file types, allowing remote authenticated users to upload executable PHP files and subsequently access them from the uploads directory to execute arbitr...

CVE-2005-1064

The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...

RHEL 3 / 4 : gaim (RHSA-2005:365)

An updated gaim package that fixes multiple denial of service issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A buffer overflow bug was found in the wa...

RHEL 2.1 : dhcp (RHSA-2005:212)

An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC Dynamic Host Configuration Protocol DHCP server and...

MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066) (uncredentialed check)

The remote host runs a version of Windows that has a flaw in its TCP/IP stack. The flaw may allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host or to perform a denial of service attack against the remote host. Proof of concept code is available to perform a denia...

MS05-022: Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)

The remote host is running MSN Messenger. The version of MSN Messenger used on the remote host is vulnerable to a remote buffer overflow in the way it handles GIF files with height and width fields. An attacker may exploit this vulnerability to execute arbitrary code on the remote host. C Tenable...

SUSE-SA:2005:022: kdelibs3

The remote host is missing the patch for the advisory SUSE-SA:2005:022 kdelibs3. Several vulnerabilities have been identified and fixed in the KDE desktop environment. - A buffer overflow via specially crafted PCX pictures was fixed. This could lead to a remote attacker being able to execute code...

[Full-disclosure] SUSE Security Announcement: various KDE security problems (SUSE-SA:2005:022)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: kdelibs3 Announcement-ID: SUSE-SA:2005:022 Date: Mon, 11 Apr 2005 15:00:00 +0000 Affected products: 9.1, 9.2, 9.3 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Vulnerability Type: remote code execution local denial of...

MS05-016: Vulnerability in Windows Shell (893086)

The remote version of Windows contains a flaw in the Windows Shell that could allow an attacker to elevate his privileges and/or execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to lure a victim into visiting a malicious website or into opening a malicious...

Salim Gasmi GLD (Greylisting Daemon) 1.0 < 1.4 - Postfix Greylisting Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'GLD...

phpBB up.php Arbitrary File Upload

The installed version of phpBB on the remote host includes a file upload script intended as a way for users to upload files that they can then link to in their posts. The script, however, does not require authentication, makes only a limited check of upload file types, and stores uploads in a kno...

CVE-2005-1039

CVE-2005-1039 describes a race condition in Core Utilities (coreutils) 5.2.1. When running mkdir, mknod, or mkfifo with the -m switch, local users can modify permissions of other files. Connected sources (Red Hat, Ubuntu, Debian, OSV, NVD, etc.) reiterate the same description. The provided docume...

CVE-2005-1035

CVE-2005-1035 involves multiple buffer overflows in Pavuk before 0.9.32. Affected software: Pavuk; vulnerable component: the buffer-handling logic mentioned in the description. Root cause: multiple buffer overflows. Attack vectors and impact are not specified in the provided documents; exploitati...

CVE-2005-1037

The CVE entry CVE-2005-1037 concerns an unknown vulnerability in AIX 5.3.0 when configured as an NIS client that could allow remote attackers to gain root privileges. The connected sources do not provide technical details, affected subcomponents, exact root cause, exploitation method, or remediat...

CVE-2005-1040

The CVE-2005-1040 entry concerns Novell Linux Desktop 9, specifically the netapplet component. It describes multiple unknown vulnerabilities that allow local users to gain root privileges, related to user input being passed to network scripts without verification. The connected Red Hat and NVD re...

CVE-2005-1064

The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...

CVE-2005-1024

CVE-2005-1024 affects PHP-Nuke 6.x to 7.6. The issue is an information disclosure via direct requests to my_headlines, userinfo, or search, which causes a PHP error that reveals the path. No explicit root cause or vulnerable version patch is provided in the connected documents, and exploitation d...