CVE-2005-1753

ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to sourc...

DSA-1067-1 kernel-source-2.4.16 - several

Bulletin has no description...

[SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1063-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 8th, 2006 http://www.debian.org/security/faq -...

CVE-2005-3782

Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down buttons" option is disabled, allows users with physical access to bypass login and reboot the system by entering "restart", "power", or "shutdown" sequences after t...

CVE-2005-3782

CVE-2005-3782 affects Mac OS X 10.4.3 through 10.4.6 where, if loginwindow uses the “Name and password” setting and the “Show the Restart, Sleep, and Shut Down buttons” option is disabled, an attacker with physical access can bypass login and reboot by entering >restart, >power, or >shut...

CVE-2005-4803

Graphviz before 2.2.1 is vulnerable to a local privilege escalation via a symlink attack on temporary files, allowing local users to overwrite arbitrary files due to insecure temporary-file creation. The issue is correctly identified as CVE-2005-4803 (not CVE-2005-2965). Affected component: graph...

CVE-2005-4803

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier...

CVE-2005-4803

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier...

CVE-2005-4800

The CVE-2005-4800 entry affects Yet Another PHP Image Gallery (YaPIG) versions 0.95b and earlier. The vulnerability is a direct static code injection where remote authenticated administrators can inject arbitrary PHP code via the TestGallery parameter in a mod_info action of modify_gallery.php, w...

CVE-2005-4799

YaPiG ( YaPiG ) is affected by CVE-2005-4799: multiple XSS flaws in YaPiG

FreeBSD : bogofilter -- heap corruption through excessively long words (b747b2a9-7be0-11da-8ec4-0002b3b60e4c)

Matthias Andree reports : Bogofilter's/bogolexer's input handling in version 0.96.2 was not keeping track of its output buffers properly and could overrun a heap buffer if the input contained words whose length exceeded 16,384 bytes, the size of flex's input buffer. A 'word' here refers to a...

FreeBSD : WebCalendar -- unauthorized access vulnerability (07ead557-a220-11da-b410-000e0c2e438a)

SecurityFocus reports that WebCalendar is affected by an unauthorized access vulnerability. The vulnerability is caused by improper checking of the authentication mechanism before access is being permitted to the 'assistantedit.php' file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FreeBSD : mantis -- 't_core_path' file inclusion vulnerability (82a41084-6ce7-11da-b90c-000e0c2e438a)

Secunia Research reports : Input passed to the 'tcorepath' parameter in 'bugsponsorshiplistviewinc.php' isn't properly verified, before it used to include files. This can be exploited to include arbitrary files from external and local resources. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

FreeBSD : fetchmail -- fetchmailconf local password exposure (baf74e0b-497a-11da-a4f4-0060084a00e5)

The fetchmail team reports : The fetchmailconf program before and excluding version 1.49 opened the run control file, wrote the configuration to it, and only then changed the mode to 0600 rw-------. Writing the file, which usually contains passwords, before making it unreadable to other users, ca...

FreeBSD : unzip -- permission race vulnerability (9750cf22-216d-11da-bc01-000e0c2e438a)

Imran Ghory reports a vulnerability within unzip. The vulnerability is caused by a race condition between extracting an archive and changing the permissions of the extracted files. This would give an attacker enough time to remove a file and hardlink it to another file owned by the user running...

FreeBSD : gaim -- AIM/ICQ non-UTF-8 filename crash (09db2844-0b21-11da-bc08-0001020eed82)

The GAIM team reports : A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK...

FreeBSD : cfengine -- arbitrary file overwriting vulnerability (8688d5cd-328c-11da-a263-0001020eed82)

A Debian Security Advisory reports : Javier Fernandez-Sanguino Pena discovered several insecure temporary file uses in cfengine, a tool for configuring and maintaining networked machines, that can be exploited by a symlink attack to overwrite arbitrary files owned by the user executing cfengine,...

FreeBSD : libxine -- format string vulnerability (3bc5691e-38dd-11da-92f5-020039488e34)

Gentoo Linux Security Advisory reports : Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. An attacker could submit malicious information about an audio CD to a public CDDB server or impersonate a public CDDB server. When the victim plays this C...

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...

CVE-2006-2290

Multiple cross-site scripting XSS vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 email, and 3 url parameter...