CVE-2005-0761

CVE-2005-0761 concerns ImageMagick prior to 6.1.8. A vulnerability in the PSD parsing path allows remote attackers to trigger a denial of service (application crash) by presenting a crafted PSD file. The issue is attributed to ImageMagick’s handling of PSD input, with multiple vendor advisories d...

CVE-2005-0868

CVE-2005-0868 affects AS/400 Telnet 5250 terminal emulation clients, including IBM client access, Bosanova, PowerTerm, Mochasoft (and possibly others). The root issue allows a malicious AS/400 server to execute arbitrary commands by sending a STRPCO (Start PC Organizer) command followed by STRPCC...

CVE-2005-0878

MercuryBoard before 1.1.3 is affected by CVE-2005-0878: an XSS flaw in the title field of private messages that lets remote attackers inject arbitrary script/HTML. Root cause: insufficient input sanitization in the PM title. Impact: could compromise user sessions or integrity of rendered pages as...

CVE-2005-0885

XMB Forum 1.9.1 is affected by multiple XSS vulnerabilities (via the Mood and “Send To” fields). Exploitation could allow remote script injection in the context of the affected forum pages. The CVE-2005-0885 entry is corroborated by multiple sources (NVD/NIST and CVE list). The provided documents...

CVE-2005-0762

CVE-2005-0762 describes a heap-based buffer overflow in ImageMagick’s SGI parser that could allow a remote attacker to execute arbitrary code. The issue affects ImageMagick prior to version 6.0, via crafted SGI image files. Public references in the connected documents confirm this CVE and link to...

CVE-2005-0871

calendarscheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message...

CVE-2005-0887

The CVE-2005-0887 issue affects Double Choco Latte prior to 0.9.4.3. Root cause: eval() executed with user-supplied input via the menuAction variable in functions.inc.php or main.php, enabling remote arbitrary PHP code execution. Impact: partial confidentiality, integrity, and availability depend...

CVE-2005-0875

CVE-2005-0875 affects the Yahoo plug-in for Trillian versions 2.0, 3.0, and 3.1. The issue is caused by multiple buffer overflows that allow a remote web server to crash the application (DoS) by sending a long string in an HTTP/1.1 response header. The NVD entry documents this as a denial-of-serv...

Multiple Products Malformed GIF Image File Handling Buffer Overflow (CVE-2005-0243; CVE-2005-0399; CVE-2007-1071)

...

RHEL 4 : firefox (RHSA-2005:336)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:336 advisory. Mozilla Firefox is an open source Web browser. A buffer overflow bug was found in the way Firefox processes GIF images. It is possible for an...

SUSE-SA:2005:019: mysql

The remote host is missing the patch for the advisory SUSE-SA:2005:019 mysql. MySQL is an Open Source database server, commonly used together with web services provided by PHP scripts or similar. This security update fixes a broken mysqlhotcopy script as well as several security related bugs: -...

RHEL 2.1 / 3 : ImageMagick (RHSA-2005:070)

Updated ImageMagick packages that fix a heap based buffer overflow are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the X Window System. Andrei Nigmatulin discovered a...

RHEL 4 : kdelibs (RHSA-2005:325)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:325 advisory. The kdelibs package provides libraries for the K Desktop Environment. The International Domain Name IDN support in the Konqueror browser...

RHEL 4 : ipsec-tools (RHSA-2005:232)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:232 advisory. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel. The ipsec-tools package includes: - setkey, a program...

RHEL 4 : mozilla (RHSA-2005:335)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:335 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A buffer overflow bug was found...

RHEL 4 : ImageMagick (RHSA-2005:320)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:320 advisory. ImageMagickTM is an image display and manipulation tool for the X Window System which can read and write multiple image formats. A format string bug w...

CVE-2005-0854

The CVE-2005-0854 entry concerns betaparticle blog (bp blog) prior to version 4. It reports an authentication bypass that enables remote attackers to perform file operations via direct requests to upload.asp or myFiles.asp (upload and delete respectively). The vulnerability allows unauthorized ac...

CVE-2005-0859

CzarNews is affected by a PHP remote file inclusion vulnerability in versions 1.12–1.14 (via tpath to cn_config.php). The CVE-2006-3685 entry explicitly states that an attacker can supply a URL to cn_config.php to execute arbitrary PHP code. The CVE-2005-0859 entry describes a related vector for ...

CVE-2005-0859

PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to 1 headlines.php or 2 news.php. NOTE: some sources have reported the "dir" parameter as being affected; however, this is likely a cut-and-paste error from the...

CVE-2005-0861

CVE-2005-0861 affects DeleGate prior to 8.11.1. The issue is multiple buffer overflows in DeleGate likely caused by unsafe string handling (e.g., scanning/copying long strings), enabling either a denial of service or arbitrary code execution under the privileges of the running user. Several conne...