10535 matches found
Servers Alive: Local Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory information: Title: Servers Alive - Privilege Escalation CVE Candidate Number: CAN-2005-0352 Application: Servers Alive Versions known affected: 4.1, 5.0; other versions not tested. Classification: Privilege Escalation Author: Michael Starks...
Phorum < 5.0.15 Multiple XSS
The version of Phorum installed on the remote host is prone to multiple cross-site scripting vulnerabilities due to its failure to sanitize user input. An attacker can exploit these flaws to potentially cause arbitrary script and HTML code to be rendered by a user's browser in the context of the...
Multiple KDE Security Advisories (2005-03-16)
Three KDE security advisories have been issued today. KDE Security Advisory: Local DCOP denial of service vulnerability Original Release Date: 20050316 URL: http://www.kde.org/info/security/advisory-20050316-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0396 1. System...
MDKSA-2005:057 - Updated gnupg packages fix vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: gnupg Advisory ID: MDKSA-2005:057 Date: March 15th, 2005 Affected versions: 10.0, 10.1, 9.2, Corporate 3.0, Corporate Server 2.1 Problem Description: The OpenPGP protocol is vulnerable to a...
Low: Red Hat Security Advisory: postfix security update
Updated postfix packages that include a security fix and two other bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and...
Mandrake Linux Security Advisory : ethereal (MDKSA-2005:053)
"A number of issues were discovered in Ethereal versions prior to 0.10.10, which is provided by this update. Matevz Pustisek discovered a buffer overflow in the Etheric dissector CVE-2005-0704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
RHEL 4 : postfix (RHSA-2005:152)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:152 advisory. Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and TLS. A flaw was found in the ipv6 patch used with Postfix. When the file...
RHEL 4 : squid (RHSA-2005:201)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:201 advisory. Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles fully qualified domain name FQDN lookups. A malicious DNS server...
"Drop to STARTUP Folder II" published on 2005/02/08
Michael Krax and Andreas Sandblad found "Drop to STARTUP Folder II" which has been patched for several weeks. It's a shame that neither provided code. So here we go: http://umbrella.name/computer/0daymon/ 0daymon also collected the original posts by bug finders for reference...
CVE-2005-0384
Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via a pppd client...
Security fix for the ALT Linux 9 package wireshark version 0.10.10-alt1
March 15, 2005 Sir Raorn 0.10.10-alt1 - 0.10.10 - Fixed: + CAN-2005-0699 + CAN-2005-0704 + CAN-2005-0705 - ethereal-devel and idl2eth are unusable. Dropped - libwiretap is back...
Apache Tomcat AJP12 Protocol Malformed Packet Remote DoS
According to its self-reported version number, the version of Apache Tomcat running on the remote host is affected by a denial of service vulnerability due to a failure to handle malformed input. By submitting a specially crafted AJP12 request, an unauthenticated attacker can cause Tomcat to stop...
CVE-2005-0258
Directory traversal vulnerability in 1 usercpregister.php and 2 usercpavatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete unlink arbitrary files via "/../" sequences in the avatarselect parameter...
CVE-2005-0791
Cross-site scripting XSS vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter...
CVE-2005-0508
Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."...
CVE-2005-0509
Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...
GLSA-200503-15 : X.org: libXpm vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-15 X.org: libXpm vulnerability Chris Gilbert has discovered potentially exploitable buffer overflow cases in libXpm that weren't fixed in previous libXpm versions. Impact : A carefully-crafted XPM file could crash X.org,...
CVE-2005-0742
Cross-site scripting XSS vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2005-0742
CVE-2005-0742 describes a cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7. The issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors, potentially affecting the integrity of user data. The cited NVD metrics indicate a low to mediu...
CVE-2005-0730
CVE-2005-0730 involves PY Software’s Active WebCam WebServer (webcam.exe) 5.5. The connected sources describe concrete issues: (1) Denial of Service by requesting a file on the floppy drive (A:\a.txt), (2) path disclosure via error messages revealing installation paths for nonexistent files, and ...