CVE-2005-3922

CVE-2005-3922 describes a heap-based buffer overflow in Panda Software Antivirus library (pskcmp.dll) when scanning ZOO archives. The root cause is a boundary/size handling error while decompressing user-supplied archives, potentially enabling arbitrary code execution with the target’s privileges...

CVE-2005-3910

The CVE-2005-3910 entry affects Post Affiliate Pro (merchants/index.php) in version 2.0.4 and earlier. When magic_quotes_gpc is disabled, remote attackers can trigger a local file inclusion via the md parameter, likely due to a directory traversal vulnerability. Documented impact is arbitrary loc...

CVE-2005-3923

NetObjects Fusion 9 (NOF9) is affected. The vulnerability lets a remote attacker obtain sensitive information (including passwords) by downloading the versioning_repository /rollbacklog.xml and using it to retrieve and modify the related ZIP file to edit and republish the site. No remediation det...

CVE-2005-3913

The CVE-2005-3913 entry concerns VHCS (Virtual Hosting Control System) 2.4.6.2. The vulnerability affects the domain alias management feature, specifically the creation and deletion of forwards for domain aliases, which enables a user to hijack the forwardings of other users. The provided sources...

CVE-2005-3925

CVE-2005-3925 describes multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier. The flaws allow remote attackers to execute arbitrary SQL commands through the following inputs: (1) detail[] (2) orderdir (3) orderby to find.php, and (4) id to issue....

CVE-2005-3929

Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attackers to create directories and overwrite arbitrary files via ".." sequences in the module parameter to index.php...

[SECURITY] [DSA 912-1] New centericq packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 912-1 [email protected] http://www.debian.org/security/ Martin Schulze November 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 912-1] New centericq packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 912-1 [email protected] http://www.debian.org/security/ Martin Schulze November 30th, 2005 http://www.debian.org/security/faq -...

phpAlbum Local file include vuln.

phpAlbum Local file include vuln. Vuln. dicovered by : r0t Date: 30 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/phpalbum-local-file-include-vuln.html Vendor:http://www.phpalbum.net/ affected version:v0.2.3 and prior Product Description: It is easy to install and run PHP Photo...

RSA SecurID Web Agent for IIS redirect buffer overflow

Added: 11/30/2005 CVE: CVE-2005-4734 BID: 26424 OSVDB: 20151 Background RSA SecurID Web Agent for IIS provides access control for IIS web servers using one-time authentication tokens. Problem A buffer overflow in IISWebAgentIF.dll could allow a remote attacker to execute arbitrary commands using ...

QNX RTOS 6.3.0 (phgrafx) Local Buffer Overflow Exploit (x86)

Exploit for QNX platform in category local exploits ============================================================ QNX RTOS 6.3.0 phgrafx Local Buffer Overflow Exploit x86 ============================================================ / email protected c 2005, all rights reserved. sample exploit for...

NetMail IMAP buffer overflow

Added: 11/30/2005 CVE: CVE-2005-3314 BID: 15491 OSVDB: 20956 Background Novell NetMail is an e-mail and calendaring server application. Problem A buffer overflow in the NetMail IMAP service could allow authenticated users to execute arbitrary commands using a long, specially crafted argument to...

RSA SecurID Web Agent for IIS redirect buffer overflow

Added: 11/30/2005 CVE: CVE-2005-4734 BID: 26424 OSVDB: 20151 Background RSA SecurID Web Agent for IIS provides access control for IIS web servers using one-time authentication tokens. Problem A buffer overflow in IISWebAgentIF.dll could allow a remote attacker to execute arbitrary commands using ...

RSA SecurID Web Agent for IIS redirect buffer overflow

Added: 11/30/2005 CVE: CVE-2005-4734 BID: 26424 OSVDB: 20151 Background RSA SecurID Web Agent for IIS provides access control for IIS web servers using one-time authentication tokens. Problem A buffer overflow in IISWebAgentIF.dll could allow a remote attacker to execute arbitrary commands using ...

Mac OS X Multiple Vulnerabilities (Security Update 2005-009)

The remote host is running Apple Mac OS X, but lacks Security Update 2005-009. This security update contains fixes for the following applications : - Apache2 - Apachemodssl - CoreFoundation - curl - iodbcadmintool - OpenSSL - passwordserver - Safari - sudo - syslog C Tenable Network Security, Inc...

pmwikiXSS.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0005 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ PmWiki 2.0.12 Cross Site Scripting +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON Nov 22, 2005 PUBLISHED AT...

Oracle Enterprise Manager Agent buffer overflow

Added: 11/30/2005 CVE: CVE-2005-3460 BID: 15146 OSVDB: 20664 Background Oracle Application Server 10g includes the emagent.exe program which listens for connections on port 1830/TCP by default. Problem A buffer overflow vulnerability in emagent.exe could allow a remote attacker to execute arbitra...

NetMail IMAP buffer overflow

Added: 11/30/2005 CVE: CVE-2005-3314 BID: 15491 OSVDB: 20956 Background Novell NetMail is an e-mail and calendaring server application. Problem A buffer overflow in the NetMail IMAP service could allow authenticated users to execute arbitrary commands using a long, specially crafted argument to...

CVE-2005-3902

VHCS (Virtual Hosting Control System) versions 2.2.0 through 2.4.6.2 are affected by a cross-site scripting (XSS) vulnerability in gui/errordocs/index.php. Attackers can inject arbitrary script or HTML via query strings that are reflected in an error message. The advisory entries (NVD CVE-2005-39...

CVE-2005-3901

CVE-2005-3901 affects Macromedia Flash Communication Server MX 1.0 and 1.5, where certain RTMP data is not properly validated, enabling a denial of service (instability or crash). The vulnerability is demonstrated using an alpha release build of Flash Player 8.5 (build 133). The connected documen...