CVE-2005-0525

The CVE-2005-0525 entry concerns PHP’s image.c: The function php_next_marker, reachable via getimagesize, is invoked by a JPEG image with an invalid marker value. This triggers a denial-of-service via an infinite loop caused by passing a negative length to php_stream_seek, affecting PHP versions ...

CVE-2005-0952

CVE-2005-0952 describes a cross-site scripting vulnerability in the PaFileDB 3.1 web application, specifically in pafiledb.php where the attacker can inject arbitrary script via the id parameter. The vulnerability is documented across multiple sources (NVD/Nessus/NVD CVE record). Exploitation cou...

CVE-2005-0954

CVE-2005-0954 affects Windows 2000 SP1, specifically Windows Explorer and Internet Explorer, where a malformed Windows Metafile (WMF) can be used by a remote attacker to consume CPU and cause a denial of service. The vulnerability is described as enabling a remote DoS via WMF parsing, with the NV...

CVE-2005-0947

Vulnerability summary (CVE-2005-0947) : The phpCOIN product (versions 1.2.1b and earlier) contains a directory traversal flaw in the auxiliary script auxpage.php. An attacker can supply a path in the page parameter that includes “..” to read or potentially execute arbitrary files on the server. T...

CVE-2005-0945

CVE-2005-0945 describes a stored/reflected Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1, where remote attackers can inject arbitrary script via onmouseover or onload events in (1) img, (2) link, or (3) mail tags. The NVD entry lists a base score of 4.3 (Medium) with network attack v...

CVE-2005-0750

The bluezsockcreate function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via 1 socket or 2 socketpair call with a negative protocol value...

CVE-2005-0962

CVE-2005-0962 documents a SQL injection in index.php for SquirrelCart (SquirrelCart/Lighthouse Squirrelcart). The flaw is exploited via the (1) crn parameter in a show action or (2) rn parameter in a show_detail action, allowing remote SQL commands. Affected: SquirrelCart 1.5.5 and prior versions...

CVE-2005-0524

The vulnerability CVE-2005-0524 affects PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3 via the getimagesize entry point. The php_handle_iff function in image.c can be triggered to loop infinitely by a -8 size value, allowing remote attackers to cause a denial of service. The provided documents name PHP secur...

CVE-2005-0955

InterAKT MX Shop 1.1.1 is affected by a SQL injection vulnerability via the id_ctg parameter, allowing remote attackers to execute arbitrary SQL commands. CVSSv2 base score 7.5 (NETWORK/LOW ATTACK COMPLEXITY, NO AUTHENTICATION). No remediation details are provided in the supplied documents; explo...

CVE-2005-0750

CVE-2005-0750 affects the Bluetooth driver in the Linux kernel (2.4.6–2.4.30-rc1 and 2.6–2.6.11.5). The bluez_sock_create function fails to validate a negative protocol value, allowing a local user to gain privileges via a crafted socket or socketpair call. Public details appear in multiple advis...

CVE-2005-0943

CVE-2005-0943 affects Cisco VPN 3000 Series Concentrator running firmware 4.1.7.A and earlier. The vulnerability allows remote attackers to cause a denial of service (device reload or user connection drop) by sending a crafted HTTPS packet. Attack vector is network, with low complexity and no aut...

CVE-2005-0953

CVE-2005-0953 (bzip2) : A race condition in bzip2 (versions 1.0.2 and earlier) lets a local user modify the permissions of an arbitrary file during decompression via a hard-link attack on a file while it is being decompressed. This can affect files in a directory where the attacker has write acce...

CVE-2005-0963

CVE-2005-0963 concerns an error in the Toshiba ACPI BIOS 1.6 that causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, preventing boot even when the MBR is not malformed. The description notes that there is debate on whether this constitute...

Cross-Site Scripting vulnerability

PMASA-2005-3 Announcement-ID: PMASA-2005-3 Date: 2005-04-03 Summary Cross-Site Scripting vulnerability Description We received a security advisory from Oriol Torrent Santiago and we wish to thank him for his work and report. The convcharset parameter was not correctly validated, opening the door ...

Information leak in the Linux kernel ext2 implementation

Description: Information leak in the Linux kernel ext2 implementation References: CAN-2005-0400 Authors: Mathieu Lafon [email protected] Romain Francoise [email protected] Arkoon Security Team Advisory - March 25, 2005 http://arkoon.net/advisories/ext2-make-empty-leak.txt Revision: 1.0 1...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2005:065)

A format string vulnerability was discovered in ImageMagick, in the way it handles filenames. An attacker could execute arbitrary code on a victim's machine provided they could trick them into opening a file with a special name CVE-2005-0397. As well, Andrei Nigmatulin discovered a heap-based...

Solaris 9 (sparc) : 119433-01

SunOS 5.9: telnet. Date this patch was last updated by Sun : Mar/28/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid17683;...

Solaris 9 (x86) : 117476-06

SunOS 5.9x86: ufs Patch. Date this patch was last updated by Sun : Jul/15/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 9 (sparc) : 117427-08

SunOS 5.9: ufs Patch. Date this patch was last updated by Sun : Jul/15/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

RHEL 4 : gtk2 (RHSA-2005:344)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:344 advisory. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug was found in the way...