CVE-2005-4792

CVE-2005-4792 is a SQL injection in phpWebSite’s index.php (versions

CVE-2005-2316

CVE-2005-2316 affects Domain Name Relay Daemon (DNRD) prior to version 2.19.1. The vulnerability arises from a DNS packet using message compression in the QNAME with two pointers that reference each other (circular buffer), allowing remote attackers to trigger infinite recursion and cause a denia...

CVE-2005-2315

CVE-2005-2315 affects the FreeBSD/dnrd (Domain Name Relay Daemon) prior to version 2.19.1. The common vulnerability across sources is a remote buffer overflow (and related stack overflow) triggered by processing large DNS packets with the Z and QR flags cleared, which can allow an attacker to exe...

CVE-2005-0037

The CVE-2005-0037 entry documents a DoS in the DNS implementation of DNRD prior to version 2.10. A remote attacker can trigger an infinite loop by sending a compressed DNS packet with a label-length byte offset error, potentially impacting availability. Multiple sources (NVD, SUSE CVE page, CVE l...

CVE-2005-0036

CVE-2005-0036 affects DeleGate 8.10.2 and earlier. The DNS message decompression mishandles a compressed DNS packet with a label length offset, which could trigger an infinite loop and remote DoS. This is documented in NVD/SUSE/JVN entries; exploitation status and specific remediation/patch detai...

CVE-2005-0038

Summary (CVE-2005-0038): The DNS implementation in PowerDNS 2.9.16 and earlier is vulnerable to remote denial of service via a compressed DNS packet with a label length byte offset error that can trigger an infinite loop. This is corroborated by multiple sources in the connected documents (NVD, S...

Ubuntu 4.10 / 5.04 / 5.10 : mozilla vulnerabilities (USN-275-1)

Web pages with extremely long titles caused subsequent launches of Mozilla browser to hang for up to a few minutes, or caused Mozilla to crash on computers with insufficient memory. CVE-2005-4134 Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables...

[SECURITY] [DSA 1046-1] New Mozilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1046-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1046-1] New Mozilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1046-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2006 http://www.debian.org/security/faq -...

CVE-2005-4790

Concrete details from connected docs show CVE-2005-4790 is linked to Tomboy and GNOME Tomboy: the LD_LIBRARY_PATH is polluted with a zero-length directory name, causing the current working directory to be searched for libraries and enabling local privilege escalation. The issue is tied to an inco...

CVE-2005-4788

CVE-2005-4788 affects resmgr in SUSE Linux 9.2 and 9.3 (and possibly other distributions). The issue allows local users to bypass USB device access control via an alternate syntax for specifying USB devices. The connected sources (Red Hat, SUSE, NVD entries) confirm the description and scope but ...

CVE-2005-4791

CVE-2005-4791 involves multiple untrusted search path vulnerabilities in SUSE Linux 10.0 where the working directory is added to LD_LIBRARY_PATH. This could allow a local user to execute arbitrary code via the liferea or banshee executables due to the library search path manipulation. The descrip...

[SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1044-1 [email protected] http://www.debian.org/security/ Martin Schulze April 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1044-1 [email protected] http://www.debian.org/security/ Martin Schulze April 26th, 2006 http://www.debian.org/security/faq -...

RHEL 3 / 4 : ipsec-tools (RHSA-2006:0267)

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

php security update

CentOS Errata and Security Advisory CESA-2006:0276 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

ipsec security update

CentOS Errata and Security Advisory CESA-2006:0267 Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec...

Moderate: Red Hat Security Advisory: ipsec-tools security update

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

Moderate: Red Hat Security Advisory: php security update

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

CVE-2006-2005

Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an "include" statement that is injected into the eval statement. NOTE: this issue has been described as file inclusion by som...