[SECURITY] [DSA 696-1] New perl packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 696-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2005 http://www.debian.org/security/faq -...

CVE-2005-0830

CVE-2005-0830 - Xzabite DYNDNSUpdate : Multiple buffer overflows in DYNDNSUpdate before or at 0.6.15, including the ipcheck function in dyndnsupdate.c, allow remote attackers (spoofed dyndns.org server) to execute arbitrary code. Affected product is Xzabite/dyndnsupdate; exact vulnerable versions...

CVE-2005-0831

The vulnerability CVE-2005-0831 affects PHP-Post and allows remote attackers to spoof other users’ names by registering with a username containing hex-encoded characters. The description is confirmed across multiple sources (NVD, Red Hat CVE entry, CVE List) and indicates weak input handling enab...

CVE-2005-0834

The CVE-2005-0834 issue affects Belkin 54G (F5D7130) wireless router: SNMP is enabled by default, enabling remote attackers to obtain sensitive information. The NVD entry indicates a NETWORK vector with LOW complexity, no authentication, and PARTIAL confidentiality impact. No explicit remediation...

CVE-2005-0835

CVE-2005-0835 affects the Belkin 54G (F5D7130) wireless router. The SNMP service can be exploited remotely to cause a denial of service via unknown vectors. This mode indicates a network-facing impact with partial loss of availability; no exploitation details or specific remediation are provided ...

CVE-2005-0832

CVE-2005-0832 is an XSS vulnerability in PHP-Post prior to 0.33. The issue allows remote attackers to inject arbitrary script or HTML via unknown vectors. Affected software is PHP-Post versions before 0.33; remediation is to update to 0.33 or later. No exploitation details are provided in the con...

CVE-2005-0829

The CVE-2005-0829 entry concerns a Cross-site scripting (XSS) vulnerability in the Digitanium addon to PHP-Fusion 5.01, specifically in setuser.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the user_name or user_pass parameters. Based on the provided do...

CVE-2005-0827

The CVE affects RUNCMS 1.1A, Ciamos 0.9.2 RC1, and e-Xoops 1.05 Rev3, via the Viewcat.php code path where convertorderbytrans is invoked. The underlying issue is that an invalid parameter to convertorderbytrans causes a PHP error message that reveals the filesystem path, enabling remote attackers...

CVE-2005-0832

Cross-site scripting XSS vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-0826

CVE-2005-0826 affects OllyDbg 1.10 and earlier. The issue arises when loading a dynamic link library (DLL) with a long filename, leading to a ** denial of service (application crash)**. The available documents do not specify the exact vulnerable file, vector beyond the DLL filename length, or a c...

CVE-2005-0825

CVE-2005-0825 affects LTris prior to 1.0.10. A buffer overflow triggered by a crafted highscores file allows local users to run arbitrary code. The description and connected sources state the vulnerability is local-rights elevation with a potential to execute code on the affected host, but no exp...

CVE-2005-0828

The CVE-2005-0828 entry affects RunCMS 1.1A, Ciamos 0.9.2 RC1, and e-Xoops 1.05 Rev3 via highlight.php, where the file parameter can disclose arbitrary PHP files (e.g., mainfile.php). This information disclosure has a CVSSv2 base score of 5.0 (PARTIAL confidentiality). Remediation guidance in con...

CVE-2005-0713

The CVE-2005-0713 issue affects Apple Mac OS X up to and including 10.3.7, where the Bluetooth Setup Assistant can be launched without a keyboard or Bluetooth device, allowing local users to bypass access restrictions and gain privileges. The underlying risk is local privilege escalation via an i...

CVE-2005-0836

Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file...

CVE-2005-0837

IceCast 2.20 is affected: remote attackers can bypass the XSL parser and obtain the source of XSL files by requesting a .xsl file with a trailing dot. The provided documents identify the affected product and the exact bypass method, but do not include any remediation details or patch versions.

CVE-2005-0715

CVE-2005-0715 affects Apple Mac OS X AFP Server prior to 10.3.8; insecure permissions on "Drop Boxes" allow local users to read their contents. No exploit details are provided in the connected documents. Remediation guidance in the sources references a security update (Mac OS X Security Update 20...

CVE-2005-0836

CVE-2005-0836 describes an argument injection in Sun Java Web Start/J2SE (Java Web Start for J2SE 1.4.2 up to 1.4.2_06) where the value parameter in a JNLP file’s property tag can be exploited to grant privileges to untrusted applications. This can bypass Java security restrictions and may lead t...

CVE-2005-0716

CVE-2005-0716 affects Mac OS X 10.3.5/10.3.6 (and possibly earlier) where a stack-based buffer overflow in the Core Foundation Library is triggered by a long CF_CHARSET_PATH environment variable. This local vulnerability could allow an attacker to execute arbitrary code on the affected system; iD...

CVE-2005-0764

The CVE-2005-0764 entry concerns rxvt-unicode with a buffer overflow in command.C prior to version 5.3. An attacker can cause remote code execution by supplying a crafted file containing long escape sequences. The base vulnerability is a memory overflow in handling the crafted input, enabling pot...

CVE-2005-0838

CVE-2005-0838 affects IceCast 2.20’s XSL parser. Multiple buffer overflows in handling long values in xsl:when, xsl:if, or xsl:value-of may lead to denial of service and possibly arbitrary code execution. The description specifies the vulnerable components but does not provide patched versions or...