CVE-2005-0507

CVE-2005-0507 describes a directory traversal vulnerability in SD Server 4.0.70 and earlier that allows remote attackers to read arbitrary files via .. sequences in an HTTP request. The affected software is SD Server (versions up to and including 4.0.70); the underlying issue is improper validati...

CVE-2005-0505

Unknown vulnerability in Information Resource Manager IRM before 1.5.2.1 allows remote attackers to have "potentially serious" impact, related to LDAP logins...

CVE-2005-0505

CVE-2005-0505 concerns an unknown vulnerability in Information Resource Manager (IRM) prior to version 1.5.2.1 that could allow remote attackers to cause potentially serious impact, related to LDAP logins. The available sources (NVD/NVD mirror) list a high impact (base score 7.5) with network att...

CVE-2005-0508

CVE-2005-0508 affects Batik’s Squiggle component prior to Batik 1.5.1. The vulnerability allows bypassing certain access controls via features of the Rhino JavaScript engine due to a script security issue. Root cause is tied to Rhino scripting security in Squiggle. Affected software is Batik (Squ...

CVE-2005-0258

Directory traversal vulnerability in 1 usercpregister.php and 2 usercpavatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete unlink arbitrary files via "/../" sequences in the avatarselect parameter...

CVE-2005-0937

Some futex functions in futex.c for Linux kernel 2.6.x perform getuser calls while holding the mmapsem semaphore, which could allow local users to cause a deadlock condition in dopagefault by triggering getuser faults while another thread is executing mmap or other functions...

CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

RHEL 4 : ImageMagick (RHSA-2005:071)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:071 advisory. ImageMagick is an image display and manipulation tool for the X Window System. Andrei Nigmatulin discovered a heap based buffer overflow flaw in the...

RHEL 4 : kdegraphics (RHSA-2005:066)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:066 advisory. The kdegraphics packages contain applications for the K Desktop Environment including kpdf, a pdf file viewer. A buffer overflow flaw was fou...

RHEL 4 : emacs (RHSA-2005:110)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:110 advisory. Emacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemai...

RHEL 4 : perl-DBI (RHSA-2005:072)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:072 advisory. DBI is a database access Application Programming Interface API for the Perl programming language. The Debian Security Audit Project discovered that th...

RHEL 4 : krb5 (RHSA-2005:045)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:045 advisory. Kerberos is a networked authentication system that uses a trusted third party a KDC to authenticate clients and servers to each other. A heap based...

RHEL 4 : xpdf (RHSA-2005:034)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:034 advisory. Xpdf is an X Window System based viewer for Portable Document Format PDF files. A buffer overflow flaw was found in the Gfx::doImage function...

RHEL 4 : CUPS (RHSA-2005:053)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:053 advisory. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. During a source code audit, Chris Evans and...

RHEL 4 : thunderbird (RHSA-2005:094)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:094 advisory. Thunderbird is a standalone mail and newsgroup client. A bug was found in the way Thunderbird handled synthetic middle click events. It is...

RHEL 4 : squid (RHSA-2005:060)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:060 advisory. Squid is a full-featured Web proxy cache. A buffer overflow flaw was found in the Gopher relay parser. This bug could allow a remote Gopher...

RHEL 4 : postgresql (RHSA-2005:138)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:138 advisory. A flaw in the LOAD command in PostgreSQL was discovered. A local user could use this flaw to load arbitrary shared libraries and therefore...

RHEL 4 : mod_python (RHSA-2005:100)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:100 advisory. Modpython is a module that embeds the Python language interpreter within the Apache web server, allowing handlers to be written in Python. Graham...

RHEL 4 : alsa-lib (RHSA-2005:033)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:033 advisory. The alsa-lib package provides a library of functions for communication with kernel sound drivers. A flaw in the alsa mixer code was discovered that...

RHEL 4 : gpdf (RHSA-2005:057)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:057 advisory. GPdf is a viewer for Portable Document Format PDF files for GNOME. A buffer overflow flaw was found in the Gfx::doImage function of Xpdf whic...