CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux is affected by a vulnerability that allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, potentially involving the GE_received_key function in keys.c. The description across sources consistently identifies the...

CVE-2005-4705

BEA WebLogic Server/Express insecure connection handling: when a Java client opens an SSL connection after an insecure one, the SSL session may be downgraded and the connection can be sniffed. Affected: WebLogic Server/Express 6.1 SP7, 7.0 SP6, 8.1 SP4 and earlier. Root cause described as returni...

CVE-2005-4702

CVE-2005-4702 is an SQL injection vulnerability affecting IPBProArcade 2.5.2, reported for index.php (gameid parameter). The description indicates remote attackers could inject arbitrary SQL commands, with sources noting possible confusion with shell metacharacter-related issues and potential red...

CVE-2005-4703

CVE-2005-4703 affects Apache Tomcat 4.0.3 on Windows. When a request targets a file whose name matches an MS-DOS device name (e.g., lpt9), the server may disclose the pathname in an error message (demonstrated by lpt9.xtp, e.g., via Nikto). Root cause: improper handling of MS-DOS device names lea...

CVE-2005-4706

Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...

CVE-2005-4696

CVE-2005-4696 concerns the Microsoft Wireless Zero Configuration system (WZCS). The vulnerability arises because WZCS stores WEP keys and pair‑wise Master Keys (PMKs) for the WPA pre‑shared key in plaintext in the memory of the explorer process, enabling attackers with local memory access to extr...

CVE-2005-4701

CVE-2005-4701 concerns an unspecified vulnerability in Sun Solaris 10’s Process File System (procfs) that could allow local users to obtain sensitive information such as process working directories via unknown attack vectors (possibly pwdx). The NVD/related records assign a low base score (CVSSv2...

CVE-2005-4707

An XSS vulnerability affects PHP GEN prior to 1.3, allowing remote attackers to inject arbitrary script/HTML via unknown attack vectors. The NVD entry lists a base score of 4.3 (MEDIUM) with Network attack vector, no confidentiality impact, partial integrity impact, and no availability impact. Af...

CVE-2005-4704

The CVE-2005-4704 entry describes an unspecified vulnerability in BEA WebLogic Server and WebLogic Express (versions 8.1–SP3, 7.0–SP6, 6.1–SP7) where, when SSL is intended to be used, an unencrypted protocol is used in certain circumstances. This leads to user credentials being sent in the clear ...

[SECURITY] [DSA 962-1] New pdftohtml packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 962-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 961-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 961-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2006 http://www.debian.org/security/faq -...

CVE-2005-4682

The CVE-2005-4682 entry describes a Cross-site Scripting (XSS) vulnerability in AudienceView, exploitable via the TSerrorMessage parameter in error.asp. The core issue is injecting arbitrary web script/HTML through user-controlled input, indicating that error handling/display path does not proper...

CVE-2005-4683

PADL MigrationTools 46 is affected by CVE-2005-4683: on failure, sensitive data (e.g., /etc/shadow) may be written to world-readable temporary files such as /tmp/nis.$$ .ldif and possibly other temp files, due to improper handling by the suite of migration scripts (migrate_all_online.sh, migrate_...

CVE-2005-4684

The vulnerability CVE-2005-4684 affects Konqueror and is caused by the DNS resolver handling a non-root domain in its search list, enabling a cookie to be associated with multiple domains or an attacker to steal cookies for an expanded hostname. The evidence in connected documents confirms the is...

CVE-2006-0492

The CVE-2006-0492 entry affects Calendarix and describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via (1) catview in cal_functions.inc.php and (2) login in cal_login.php. The catview vector may overlap CVE-2005-1865. No product versions ...

CVE-2005-4683

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

CVE-2005-4683

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

CVE-2005-4678

Apple Safari 2.0.2 (416.12) is affected by CVE-2005-4678. The vulnerability allows remote attackers to spoof the status bar URL by abusing the title attribute of an image inside a link to a trusted site within a form to the malicious site. The note indicates provenance is from third-party informa...

CVE-2005-4681

CVE-2005-4681 involves the mIRC client (versions 5.91–6.16). A buffer overflow in the DCC Get Folder Dialog when entering a long string allows local users to execute arbitrary code. The vendor disputes this as a vulnerability, suggesting it may be a local bug and possibly only exploitable by the ...