CVE-2005-3188

CVE-2005-3188 corresponds to a buffer overflow in Nullsoft Winamp 5.094, triggered by crafted playlist references in m3u or pls files (long lines ending in .wma). The issue enables remote code execution due to inadequate input sanitization during playlist processing. Relatedly, CVE-2006-0476 cove...

mozilla security update

CentOS Errata and Security Advisory CESA-2006:0199-01 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2006-February/074784.html Affected packages: mozilla mozilla-chat mozilla-devel mozilla-dom-inspector mozilla-js-debugger mozilla-mail mozilla-nspr...

firefox security update

CentOS Errata and Security Advisory CESA-2006:0200 An updated firefox package that fixes several security bugs is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Igor Bukanov...

mozilla security update

CentOS Errata and Security Advisory CESA-2006:0199 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2006-February/074774.html https://lists.centos.org/pipermail/centos-announce/2006-February/074775.html...

Critical: Red Hat Security Advisory: firefox security update

An updated firefox package that fixes several security bugs is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Igor Bukanov discovered a bug in the way Firefox's Javascript interpret...

CVE-2005-4561

CVE-2005-4561 is rejected/not used; this CVE entry does not represent an active vulnerability.

CVE-2005-4708

The CVE-2005-4708 entry concerns Adobe Macromedia MX 2004 products, Captivate, Contribute 2/3, and the eLicensing client. The vulnerability arises from the Macromedia Licensing Service being installed with the Users group allowed to configure the service, including the path to the executable. Thi...

CVE-2005-4562

CVE-2005-4562 entry is rejected/not used; this ID does not represent an active vulnerability.

CVE-2005-4562

...

CVE-2005-4561

...

CVE-2005-4709

The CVE concerns JBoss EJB 3.0 RC3. The popSubjectContext method in SecurityAssociation preserves threadPrincipal and threadCredential from a prior client after the session ends, enabling a remote attacker to assume the roles of that previous client on the same server thread. This is described as...

Mercury Mail Transport System Phonebook service buffer overflow

Added: 02/02/2006 CVE: CVE-2005-4411 BID: 16396 OSVDB: 22103 Background Mercury Mail Transport System is a free mail server for Windows and Netware platforms. It includes a Phone Book service which runs on port 105/TCP. Problem A buffer overflow vulnerability in the Phone Book service allows remo...

Mercury Mail Transport System Phonebook service buffer overflow

Added: 02/02/2006 CVE: CVE-2005-4411 BID: 16396 OSVDB: 22103 Background Mercury Mail Transport System is a free mail server for Windows and Netware platforms. It includes a Phone Book service which runs on port 105/TCP. Problem A buffer overflow vulnerability in the Phone Book service allows remo...

Website Baker Admin Login SQL Injection

The remote host is running Website Baker, a PHP-based content management system. The installed version of Website Baker fails to validate user input to the username parameter of the 'admin/login/index.php' script before using it to generate database queries. An unauthenticated attacker can levera...

CVE-2005-4536

CVE-2005-4536 affects the Mail::Audit Perl module (libmail-audit-perl). The issue is that when logging is enabled, the module creates temporary files with predictable names, enabling a local attacker to overwrite files via a symlink attack on the [PID]-audit.log file. Debian advisories and OpenVA...

CVE-2005-4694

WebGUI

CVE-2005-4698

The provided records describe a Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier, exploitable via the q_IP (IP) or q_Host (HOST) parameters. The root cause is insufficient input sanitization in these parameters, enabling injection of arbitrary web script/HTML. Impact is limited ...

CVE-2005-4697

The Microsoft Wireless Zero Configuration system WZCS allows local users to access WEP keys and pair-wise Master Keys PMK of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll...

CVE-2005-4697

The CVE-2005-4697 entry concerns the Microsoft Wireless Zero Configuration (WZCS) system. It states that local users can access WEP keys and WPA PMKs via WZCQueryInterface in wzcsapi.dll, due to exposure through this API. Affected software/component: Microsoft WZCS and wzcsapi.dll; vulnerability ...

CVE-2005-4706

Technical details about CVE-2005-4706 are not publicly provided in the connected documents. The available sources summarize an unspecified denial-of-service in Solaris 10. Monitor for updated vendor advisories or patch information.