CVE-2005-1002

logwebftbs2000.exe in Logics Software File Transfer LOG-FT allows remote attackers to read arbitrary files via modified 1 VARFTLANG and 2 VARFTTMPL parameters...

CVE-2005-0992

Summary: CVE-2005-0992 is an XSS in phpMyAdmin’s index.php via the convcharset parameter. The NVD entry lists a base score of 4.3 (MEDIUM) with network access, no confidentiality impact, but partial integrity impact and no availability impact. Connected OpenVAS entries tie the vulnerability to ph...

CVE-2005-1005

CVE-2005-1005 affects ProfitCode PayProCart 3.0. The vulnerability allows remote attackers to bypass authentication and gain administrative privileges in the admin control panel by issuing a direct request to adminshop/index.php containing hex-encoded .. sequences in the ftoedit parameter, enabli...

CVE-2005-1000

CVE-2005-1000: XSS in PHP-Nuke 7.6. Affected components include banners.pgp (EmailStats op) via bid, Web_Links (TopRated/MostPopular via ratenum, viewlinkdetails/editorial/comments/ratelink via ttitle), and Your_Account (username). Root cause is improper handling of user-supplied parameters leadi...

CVE-2005-1005

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter...

arts, kdelibs security update

CentOS Errata and Security Advisory CESA-2005:307-01 Updated kdelibs packages that fix a local denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop...

XFree86 security update

CentOS Errata and Security Advisory CESA-2005:044-01 Updated XFree86 packages that fix a libXpm integer overflow flaw and a number of bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementati...

RHEL 2.1 / 3 : kdelibs (RHSA-2005:307)

Updated kdelibs packages that fix a local denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment. Sebastian Krahmer discovered a flaw in...

Compaq WBEM HTTP Server Remote Overflow

The remote host is running a Compaq Web Management server. The remote version of this software is vulnerable to an unspecified buffer overflow that may allow an attacker to execute arbitrary code on the remote host with the privileges of the web server process. C Tenable Network Security, Inc...

RHEL 2.1 : XFree86 (RHSA-2005:044)

Updated XFree86 packages that fix a libXpm integer overflow flaw and a number of bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low...

curl security update

CentOS Errata and Security Advisory CESA-2005:340-01 Updated curl packages are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of the support...

CVE-2005-0989

CVE-2005-0989 concerns the Mozilla family JavaScript engine. Affected products include Mozilla Suite 1.7.6, Firefox 1.0.1/1.0.2, and Netscape 7.2. The vulnerability arises in the find_replen function in jsstr.c, enabling a remote attacker to read portions of heap memory through the string replace...

CVE-2005-0990

unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...

CVE-2005-0990

unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...

CVE-2005-0988

CVE-2005-0988 describes a race condition in gzip prior to 1.3.5 that affects permission handling during decompression. Specifically, when decompressing a file, a local attacker could exploit a hard-link or timing issue to change the permissions of an arbitrary file (or overwrite it) in the target...

CVE-2005-0990

CVE-2005-0990 affects sharutils 4.2.1, specifically unshar.c, where a local user can perform a symlink attack on the unsh.X temporary file to overwrite arbitrary files. This is described across multiple sources (NVD entry for CVE-2005-0990, Debian/OSV references, and Red Hat/CentOS advisories) an...

CVE-2005-0987

CVE-2005-0987 is described as an Unknown vulnerability in IRC Services NickServ LISTLINKS prior to version 5.0.50, allowing remote attackers to obtain the links of a nick. The connected documents confirm the affected component as IRC Services NickServ LISTLINKS and specify the fixed version as 5....

CVE-2005-0986

IBM Lotus Domino Server web service (NLSCCSTR.DLL) is vulnerable to a remote denial-of-service via a crafted GET request. A long request containing a Unicode value of 430 characters can trigger deep recursion and crash the nHTTP.exe process, exhausting the stack. Affected products include Lotus D...

CVE-2005-0991

CVE-2005-0991 concerns IBM AIX 5.1/5.2/5.3 where the RC.BOOT component does not use a secure location for temporary files. The connected documents confirm a local-access vulnerability with an unknown impact, reportedly possibly enabling overwriting of files. The vulnerability details are consiste...

RHEL 4 : gdk-pixbuf (RHSA-2005:343)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:343 advisory. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. A bug was found in the way gdk-pixbuf processes...