10535 matches found
CVE-2005-0634
CVE-2005-0634 concerns Golden FTP Server 1.92, where a buffer overflow in handling a long USER command allows remote code execution. The core entry is supported by NVD: the USER vector enables an arbitrary code execution scenario (high impact). The connected advisory CPAI-2006-151 also notes a re...
CVE-2005-0642
The CVE-2005-0642 issue affects CA Unicenter Asset Management (UAM) 4.0, specifically the Query Designer component. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL through an imported file. The root cause is improper handling of input in the Query Design...
CVE-2005-0640
CA Unicenter Asset Management (UAM) 4.0 contains a flaw where the "+Change Credentials for Database" window is not properly initialized, enabling local users to recover the SQL Admin password. The root cause is improper window initialization, per the CVE entry. The documented impact is partial co...
CVE-2005-0640
Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...
CVE-2005-0638
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...
RHEL 4 : HelixPlayer (RHSA-2005:271)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:271 advisory. HelixPlayer is a media player. A stack based buffer overflow bug was found in HelixPlayer's Synchronized Multimedia Integration Language SMIL...
SUSE-SA:2005:013: cyrus-sasl,cyrus-sasl2
The remote host is missing the patch for the advisory SUSE-SA:2005:013 cyrus-sasl,cyrus-sasl2. cyrus-sasl is a library providing authentication services. A buffer overflow in the digestmda5 code was identified that could lead to a remote attacker executing code in the context of the service using...
RHEL 2.1 / 3 : kdenetwork (RHSA-2005:175)
Updated kdenetwork packages that fix a file descriptor leak are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The kdenetwork packages contain a collection of networking applications for the K Desktop Environment. A bug was found in t...
RHEL 4 : RealPlayer (RHSA-2005:265)
An updated RealPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player. A stack based buffer overflow bug was found in RealPlayer's Synchronized...
RHEL 2.1 / 3 : squid (RHSA-2005:173)
Updated squid packages that fix a denial of service issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles FQDN lookups. It was possible to cra...
GLSA-200503-06 : BidWatcher: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-06 BidWatcher: Format string vulnerability Ulf Harnhammar discovered a format string vulnerability in 'netstuff.cpp'. Impact : Remote attackers can potentially exploit this vulnerability by sending specially crafted respons...
CVE-2005-0626
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...
CVE-2005-0626
CVE-2005-0626 affects Squid 2.5.STABLE7–2.5.STABLE9 in the Netscape Set-Cookie handling path. The race condition can cause Set-Cookie headers to leak to other users, enabling cookie theft. Affected: Squid proxy/cache; root cause: incorrect handling of Set-Cookie in cached responses, per multiple ...
CVE-2005-0626
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...
CVE-2005-0613
CVE-2005-0613 concerns an vulnerability in the FCKeditor 2.0 RC2 when used with PHP-Nuke, allowing remote attackers to upload arbitrary files. The issue is evidenced across multiple sources in the connected documents, which identify the affected component as the FCKeditor add-on for PHP-Nuke and ...
CVE-2005-0614
Affected software/component: phpBB (versions
CVE-2005-0616
CVE-2005-0616 describes cross-site scripting (XSS) in the PostNuke Download module for versions 0.750 and 0.760-RC2. The vulnerability affects the Download module’s handling of several input fields (Program name, File link, Author name, Author e‑mail, File size, Version, Home page), enabling remo...
CVE-2005-0583
CVE-2005-0583 concerns the CA License Client 0.1.0.15, where a directory traversal via PUTOLF requests can create arbitrary files across the host. Public sources (NVD/NVD-derived entries and iDEFENSE advisory) confirm the vulnerability exists in CA License Client/Server components and note that a...