[SECURITY] [DSA 917-1] New courier packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 917-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 917-1] New courier packages fix unauthorised access

-------------------------------------------------------------------------- Debian Security Advisory DSA 917-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

CVE-2005-4079

The registerglobals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the importblacklist variable in grabglobals.php, which can then be used to overwrite other variables...

CVE-2005-4070

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3665. Reason: This candidate is a reservation duplicate of CVE-2005-3665. Notes: All CVE users should reference CVE-2005-3665 instead of this candidate. All references and descriptions in this candidate have been removed to...

DEBIAN-CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, and 4 pdftohtml, 5 KOffice KWord, 6 CUPS, and 7 libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps number o...

CVE-2005-4078

CVE-2005-4078 describes multiple cross-site scripting (XSS) flaws in Ideal BB.NET 1.3 and earlier. The vulnerabilities permit remote injection of arbitrary web script or HTML via parameters in topics.aspx (forumID, boardID, topicRepeater1-p), categoryindex.aspx (boardID), posts.aspx (postID), for...

CVE-2005-4082

Consolidated details for CVE-2005-4082 show: the dhcp.client program on QNX 4.25 vmware is setuid, reportedly by default, enabling local users to modify NIC configuration and potentially carry out additional attacks. This denotes a local-privilege issue stemming from a setuid binary. The availabl...

CVE-2005-4077

Multiple off-by-one errors in the cURL library libcurl 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that 1 are malformed in a way that prevents a terminating null byte from being added to...

CVE-2005-4074

The CVE-2005-4074 entry describes a directory traversal vulnerability in CF_Nuke 4.6 and earlier. When Sandbox Security is disabled, remote attackers can cause local .cfm files to be included via a ".." in the (1) sector or (2) page parameters. The connected documents provide this exact vulnerabi...

CVE-2005-4072

The CVE describes a cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier, where an attacker can inject arbitrary script via the Words parameter in search_forums.cfm used in the “Search For:” field. The available records confirm the affected software and the inp...

CVE-2005-4084

The CVE-2005-4084 issue affects the phpBB eXtreme Styles module (

CVE-2005-4070

...

CVE-2005-4070

CVE-2005-4070 entry is rejected/unused; refer to CVE-2005-3665.

CVE-2005-3192

CVE-2005-3192 is a heap-based buffer overflow in the StreamPredictor function of Xpdf 3.01 that allows remote code execution via a PDF with an out-of-range numComps field. The vulnerability affects downstream products that bundle or rely on Xpdf, including Poppler, teTeX, KDE kpdf, pdftohtml, KOf...

CVE-2005-4081

CVE-2005-4081 involves multiple SQL injection vulnerabilities in Alisveristr E-commerce. The issues affect login functionality (user and administrator login pages) and allow remote attackers to bypass authentication and potentially execute arbitrary SQL commands through the username and password ...

CVE-2005-4077

CVE-2005-4077 affects libcurl (curl) versions 7.11.2–7.15.0, where multiple off-by-one errors can cause a buffer overflow. Exploitation is local and can trigger a denial of service or bypass PHP security restrictions via crafted URLs, either malformed to prevent a terminating null byte in hostnam...

CVE-2005-4076

The CVE-2005-4076 entry concerns Appfluent Technology Database IDS 2.0. A buffer overflow can be triggered by a long APPFLUENT_HOME environment variable, allowing local users to execute arbitrary code. The vulnerability is local in scope with partial confidentiality, integrity, and availability i...

CVE-2005-4068

The CVE-2005-4068 entry concerns an unspecified absolute path vulnerability in the AIX utility umountall, affecting IBM AIX 5.1–5.3 with local-access implications (exact impact and vectors not disclosed in the provided documents). Connected sources identify vendor patches related to bos.rte.files...