10535 matches found
Mambo Open Source Tar.php Remote File Inclusion
The version of Mambo Open Source on the remote host fails to properly sanitize input passed through the 'mosConfigabsolutepath' parameter of the 'Tar.php' script. Provided PHP's 'registerglobals' setting is enabled, a remote attacker may exploit this vulnerability to cause code to be executed in...
RHEL 4 : python (RHSA-2005:108)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:108 advisory. Python is an interpreted, interactive, object-oriented programming language. An object traversal bug was found in the Python SimpleXMLRPCServer. This...
RHEL 4 : php (RHSA-2005:032)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:032 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. Flaws including possible information disclosure,...
RHEL 4 : exim (RHSA-2005:025)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:025 advisory. Exim is a mail transport agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. A buffer...
RHEL 4 : mailman (RHSA-2005:137)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:137 advisory. Mailman is software to help manage email discussion lists. A flaw in the truepath function of Mailman was discovered. A remote attacker who is a membe...
RHEL 4 : xemacs (RHSA-2005:133)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:133 advisory. XEmacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movema...
RHEL 4 : enscript (RHSA-2005:040)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:040 advisory. GNU enscript converts ASCII files to PostScript. Enscript has the ability to interpret special escape sequences. A flaw was found in the...
RHEL 4 : htdig (RHSA-2005:090)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:090 advisory. The ht://Dig system is a Web search and indexing system for a small domain or intranet. Michael Krax reported a cross-site scripting bug affecting...
RHEL 4 : squirrelmail (RHSA-2005:099)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:099 advisory. SquirrelMail is a standards-based webmail package written in PHP4. Jimmy Conner discovered a missing variable initialization in Squirrelmail...
RHEL 4 : vim (RHSA-2005:036)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:036 advisory. VIM Vi IMproved is an updated and improved version of the vi screen-based editor. Ciaran McCreesh discovered a modeline vulnerability in VIM...
Mac OS X Java JRE Plug-in Capability Arbitrary Package Access (Security Update 2005-002)
The remote host is missing Security Update 2005-002. This security update contains a security bugfix for Java 1.4.2. A vulnerability in the Java Plug-in may allow an untrusted applet to escalate privileges, through JavaScript calling into Java code, including reading and writing files with the...
RHEL 4 : libtiff (RHSA-2005:035)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:035 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. infamous41md discovere...
CVE-2005-0503
The CVE-2005-0503 issue affects uim (libuim) where environment variables are trusted when linked into setuid/setgid applications, enabling local privilege escalation. Public details from Gentoo GLSA 200502-31 and SUSE/Gentoo advisories specify that only immodule-enabled Qt builds are affected (Qt...
CVE-2005-0498
The CVE-2005-0498 issue affects the Gigafast router (CompUSA router). A remote attacker can bypass the login by making a direct request to backup.cfg, which exposes the administrator password in plaintext. This results in partial confidentiality and partial integrity/availability impact per CVSS ...
CVE-2005-0503
uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges...
CVE-2005-0091
Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls...
CVE-2005-0490
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...
CVE-2005-0204
CVE-2005-0204 affects the Linux kernel prior to 2.6.9 on AMD64/EM64T, where local users could exploit the OUTS instruction to write to privileged IO ports. The issue is documented in multiple advisories (RHSA-2005:293, SUSE CVE-2005-0204) and CentOS/CentOS-announce and is addressed by kernel secu...
CVE-2005-0496
The CVE-2005-0496 entry applies to Arkeia Network Backup Client 5.x, where hard-coded credentials act as a back door. This allows remote attackers to access the file system and, per connected sources, potentially execute arbitrary commands. The Nessus/PT-2005-1551 item notes a default/account in ...