CVE-2005-0210

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...

CVE-2005-0766

CVE-2005-0766 describes an unknown vulnerability in the Ethereal sFlow dissector that affects versions 0.9.14 through 0.10.9 and can be exploited remotely to cause a denial of service (application crash). Multiple connected sources confirm the issue is tied to the sFlow dissector in Ethereal, wit...

CVE-2005-0384

CVE-2005-0384 : Unknown vulnerability in the Linux kernel 2.6.8.1 PPP driver that allows a remote attacker using a pppd client to cause a kernel crash (denial of service). Public references include Red Hat advisories and Debian/Ubuntu advisories; no specific fix version is provided in the supplie...

CVE-2005-0770

CVE-2005-0770 affects DataRescue IDA Pro 4.7.0.830. The vulnerability is a format string flaw in the DLL name, enabling a remote attacker or local user to trigger denial of service (CPU consumption or app crash) and possibly execute arbitrary code. Impact includes DoS and potential code execution...

CVE-2005-0396

CVE-2005-0396 affects the DCOP daemon (dcopserver) in KDE prior to 3.4. A local attacker can stall the DCOP authentication process, causing a denial of service (dcopserver consumption) for nearby desktop users. Public sources in the connected documents describe this as a local DoS vulnerability t...

CVE-2005-0768

CVE-2005-0768 concerns a buffer overflow in the administration web server of GoodTech Telnet Server (versions 4.0 and 5.0, possibly all versions before 5.0.7) that can be triggered by sending a long string to port 2380. The vulnerability is described as allowing remote code execution. Public refe...

CVE-2005-0767

CVE-2005-0767 is documented in multiple advisories as a race condition in the Radeon DRI driver. The vulnerability affects systems using the Linux kernel with Radeon DRI hardware accelerated graphics, where a local user with DRI privileges could potentially gain root privileges due to a race in t...

CVE-2005-0769

CVE-2005-0769 affects OpenSLP prior to 1.1.5. Multiple buffer overflows in the OpenSLP service when handling malformed SLP packets allow remote attackers to potentially execute code or cause other effects; some sources describe the risk as remote arbitrary-code execution, while NVD notes an unkno...

CVE-2005-0765

CVE-2005-0765 : In Ethereal, unknown issue in the JXTA dissector allowed remote attackers to crash the application (DoS) on versions up to 0.10.9; Red Hat/Mandrake/Gentoo advisories and PT security entries link this family of issues to the 0.10.10 fix. Affected: Ethereal up to 0.10.9; Remediation...

CVE-2005-0210

CVE-2005-0210 is a Netfilter-related vulnerability in Linux kernel 2.6.8.1 where certain fragmented packets reassembled twice cause a data structure to be allocated twice, leading to memory exhaustion and potential denial of service. The connected documents confirm this issue and show that multip...

CVE-2005-0209

CVE-2005-0209 is a Linux kernel netfilter fragmentation flaw that allows a remote attacker to crash the system (DoS) by sending crafted IP fragments. Documented impact is a kernel crash via malformed fragments in the netfilter path of Linux 2.6.x (notably 2.6.8.1). Public advisories confirm vulne...

RHEL 2.1 : sylpheed (RHSA-2005:303)

An updated sylpheed package that fixes a buffer overflow issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Sylpheed is a GTK+ based fast email client. A buffer overflow bug has been found in the way Sylpheed handles...

HP-UX PHNE_30990 : HP-UX ftpd, Remote Unauthorized Access (HPSBUX01119 SSRT4694 rev.2)

s700800 11.11 ftpd1M and ftp1 patch : A potential vulnerability has been identified with HP-UX running ftpd where the vulnerability could be exploited to allow a remote authorized user unauthorized access to files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patc...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2005:306)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

MailEnable Standard SMTP mailto: Request Format String

The remote host is running a version of MailEnable Standard Edition that suffers from a format string vulnerability in its handling of SMTP commands. Specifically, a remote attacker can crash the SMTP daemon by sending a command with a format specifier as an argument. Due to the nature of the fla...

CVE-2005-0385

CVE-2005-0385 refers to a local root-buffer overflow in luxman (SVGA-based PacMan clone) prior to version 0.41, exploitable via a long -f argument and insecure svgalib libraries. Debian/DSA-693-1 fixes the issue in luxman 0.41-17.2 (stable) and 0.41-20 (unstable). The Debian advisories describe t...

CVE-2005-0705

CVE-2005-0705 affects Ethereal 0.10.7–0.10.9 via the GPRS-LLC dissector when the ignore cipher bit option is enabled, allowing remote attackers to cause an application crash (denial of service). Red Hat advisory RHSA-2005:306 recommends upgrading Ethereal to 0.10.10 to remediate the issue.

CVE-2005-0083

MySQL MaxDB/Web Agent vulnerability CVE-2005-0083 affects MaxDB 7.5.00 for Windows (and possibly earlier/other platforms). Remote input validation errors in DBMCli_String::ReallocString, DBMCli_String::operator, DBMCli_Buffer::ForceResize, DBMCli_Wizard::InstallDatabase, DBMCli_Devspaces::Complet...

CVE-2005-0704

CVE-2005-0704 describes a buffer overflow in the Etheric dissector of Ethereal (versions 0.10.7–0.10.9) that can be triggered by processing crafted network packets, leading to a denial of service (application crash) and potentially remote code execution. Multiple vendor advisories (e.g., Red Hat ...

LSH lshd parse_kexinit() Function Malformed Key Exchange Message Remote DoS

The remote host is running Lysator's LSH, a version of Secure Shell SSH that is available for Unix-like platforms. This version of LSH is reportedly vulnerable to a denial of service attack. An attacker can exploit this issue by sending a malformed key exchange message. C Tenable Network Security...