CVE-2005-0712

CVE-2005-0712 affects Apple Mac OS X before 10.3.8, where world-writable permissions on certain directories could allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles. The issue is documented across multiple sources (NVD/NVD clone, Red Hat CVE entry, and Seeb...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 694-1] New xloadimage packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 694-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

Mac OS X Multiple Vulnerabilities (Security Update 2005-003)

The remote host is missing Security Update 2005-003. This security update contains security fixes for the following applications : - AFP Server - Bluetooth Setup Assistant - Core Foundation - Cyrus IMAP - Cyrus SASL - Folder Permissions - Mailman - Safari These programs have multiple...

GLSA-200503-23 : rxvt-unicode: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200503-23 rxvt-unicode: Buffer overflow Rob Holland of the Gentoo Linux Security Audit Team discovered that rxvt-unicode fails to properly check input length. Impact : Successful exploitation would allow an attacker to execute...

DSA-694-1 xloadimage - missing input sanitising, integer overflow

Bulletin has no description...

RHEL 4 : libexif (RHSA-2005:300)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:300 advisory. The libexif package contains the EXIF library. Applications use this library to parse EXIF image files. A bug was found in the way libexif parses EXIF...

RHEL 4 : mailman (RHSA-2005:235)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:235 advisory. Mailman manages electronic mail discussion and e-newsletter lists. A cross-site scripting XSS flaw in the driver script of mailman prior to version...

CVE-2005-0821

Citrix MetaFrame Conferencing Manager 3.0 is cited as vulnerable in CVE-2005-0821, with the issue described as a bypass of organizer restrictions that allows conference members to control the keyboard and mouse. The connected documents confirm the affected product and the general impact but do no...

CVE-2005-0797

The CVE-2005-0797 entry concerns Novell iChain Mini FTP Server 2.3, where authentication error handling reveals whether a user exists. This information disclosure can facilitate brute-force attempts, since attackers can iterate valid usernames more efficiently. The available sources confirm the a...

CVE-2005-0791

CVE-2005-0791 describes an XSS vulnerability in the adframe.php component of phpAdsNew 2.0.4-pr1. The issue occurs when PHP’s register_globals is enabled, allowing remote attackers to inject arbitrary web script or HTML via the refresh parameter. The vulnerability is confirmed by multiple sources...

CVE-2005-0794

ZPanel 2.0 and 2.5 beta 10 are affected by a vulnerability where installation scripts remain accessible after use. This may allow remote attackers to reinstall the software and potentially cause a denial of service via a direct request to install.php. The issue is described in CVE-2005-0794 and i...

CVE-2005-0809

CVE-2005-0809 affects NotifyLink server: when client key retrieval is enabled, an unauthenticated HTTP POST to /hwp/get.asp can disclose AES keys. The server uses a fixed byte reordering scheme to obfuscate the key, substantially weakening cryptographic protection and enabling brute-force recover...

CVE-2005-0814

CVE-2005-0814 affects Lysator LSH server components (lshd) in LSH 1.x and 2.x up to version 2.0.1. The vulnerability is described as an unknown DoS condition that can be triggered remotely, with vectors not detailed in the provided documents. Connected sources corroborate the affected software an...

CVE-2005-0816

CVE-2005-0816 affects Solaris 7–9, where a buffer overflow in the newgrp utility allows local users to gain root privileges. The description explicitly states the impact is local privilege escalation; no remediation details are provided in the supplied documents. A related EUVD entry mentions mal...

CVE-2005-0783

CVE-2005-0783 : Cross-site scripting in Phorum prior to 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file. Affected software is Phorum (before 5.0.14a); the vulnerability is triggered when handling file attachments. The provided documents ...

CVE-2005-0784

CVE-2005-0784 affects Phorum before 5.0.15, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The issue is triggered via the subject line in follow.php or in the user’s personal control panel, stemming from failure to properly...

CVE-2005-0786

CVE-2005-0786 is a SQL injection vulnerability in SimpGB where the quote parameter of guestbook.php is unsafely used in queries via gb_new.inc. The issue allows unauthenticated remote attackers to manipulate queries, reading or modifying data and potentially executing commands on the web server. ...

CVE-2005-0812

The CVE-2005-0812 issue affects NotifyLink 3.0 where the web interface displays user passwords in cleartext on the administrative page. root cause: passwords are stored and exposed via the admin UI, enabling an attacker with web/admin access or local access to obtain credentials. Impact per sourc...

CVE-2005-0805

SQL injection vulnerability in index.php in Subdreamer Light, when magicquotesgpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by...