CVE-2005-0401

CVE-2005-0401 affects Mozilla Firefox 1.0.1 and Mozilla before 1.7.6. The issue arises from insufficient mitigation of attack vectors for loading chrome files and hijacking drag-and-drop events, enabling a remote attacker to execute arbitrary XUL code by tricking a user into dragging a scrollbar ...

CVE-2005-0857

CVE-2005-0857 describes a cross-site scripting (XSS) vulnerability in CoolForum 0.8 and earlier, where an attacker can inject arbitrary web script or HTML through the img parameter in avatar.php. The connected documents corroborate this XSS claim, with NVD listing the CVE and Tenable/Nessus plugi...

Interspire ArticleLive 2005 (php version) is vulnerable to XSS

Can you please confirm my suggestion that: Interspire ArticleLive 2005 php version is vulnerable to XSS: e.g. http://localhost/articles/newcomment?ArticleId="scriptalert'hi'/script // best wishes, mircia [email protected]...

SUSE-SA:2005:017: ImageMagick

The remote host is missing the patch for the advisory SUSE-SA:2005:017 ImageMagick. This update fixes several security issues in the ImageMagick program suite: - A format string vulnerability was found in the display program which could lead to a remote attacker being to able to execute code as t...

Non-administrators can shut down Windows XP SP1 thru TSShutdn.exe (889323)

The version of Microsoft Windows XP SP1 on the remote host is missing security update KB889323. A non-administrative user can remotely shut down the remote host by using the TSShutdn.exe command. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17607;...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix various bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A buffer overflow bug was found in the way Thunderbird processe...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix various bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A buffer overflow bug was found in the way Firefox processes GIF images. It is...

Moderate: Red Hat Security Advisory: ipsec-tools security update

An updated ipsec-tools package that fixes a bug in parsing of ISAKMP headers is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel. The...

CVE-2005-0839

CVE-2005-0839 affects the Linux kernel 2.6 family, where access to the N_MOUSE line discipline for TTYs was not restricted. This allowed a local attacker to inject mouse movements or keystrokes into other user sessions, potentially enabling privilege escalation. The issue is fixed in later kernel...

CVE-2005-0881

Cross-site scripting XSS vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter...

DEBIAN-CVE-2005-0759

ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...

CVE-2005-0840

...

CVE-2005-0389

CVE-2005-0389 is a duplicate of CVE-2005-0814. The connected sources (NVD/OSV/OpenVAS) describe an unknown vulnerability in Lysator LSH’s lshd for Lysator LSH 1.x and 2.x up to 2.0.1 that can allow remote denial of service. The publicly available detail for CVE-2005-0814 confirms the affected com...

CVE-2005-0389

...

CVE-2005-0824

The vulnerability CVE-2005-0824 affects Mathopd’s internal_dump function. In Mathopd versions 1.5p0–1.5p4 (and 1.6x before 1.6b6 BETA), when running with -n, a local attacker can exploit a symlink attack on dump files triggered by a SIGWINCH signal to overwrite arbitrary files. This is due to imp...

CVE-2005-0839

Linux kernel 2.6 before 2.6.11 does not restrict access to the NMOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions...

CVE-2005-0840

CVE-2005-0706 describes a buffer overflow in the GNOME VFS (gnome-vfs/gnome-vfs2) CDDB handling code. When processing CDDB server responses, an attacker could trigger a crash or potentially execute arbitrary code on the victim’s machine. Multiple Nessus/OS advisories reference this CVE and list u...

Mandrake Linux Security Advisory : MySQL (MDKSA-2005:060)

A number of vulnerabilities were discovered by Stefano Di Paola in the MySQL server : If an authenticated user had INSERT privileges on the 'mysql' database, the CREATE FUNCTION command allowed that user to use libc functions to execute arbitrary code with the privileges of the user running the...

Interspire ArticleLive 2005 - NewComment Cross-Site Scripting

Interspire ArticleLive 2005 - NewComment Cross-Site Scripting source: https://www.securityfocus.com/bid/12879/info Interspire ArticleLive 2005 is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

Mozilla Browser < 1.7.6 Multiple Vulnerabilities

The remote version of Mozilla contains multiple security issues that could allow an attacker to impersonate a website and to trick a user into accepting and executing arbitrary files or to cause a heap overflow in the FireFox process and execute arbitrary code on the remote host. C Tenable Networ...