CVE-2005-3695

LiteSpeed Web Server 2.1.5 is reported to be vulnerable to a reflected cross-site scripting (XSS) flaw in admin/config/confMgr.php via the m parameter. The description indicates an arbitrary script/HTML could be injected by remote attackers, but the provided documents do not specify affected vers...

CVE-2005-3528

Cross-site scripting XSS vulnerability in tiki-viewforumthread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the topicsoffset parameter...

CVE-2005-3696

CVE-2005-3696 affects Arki-DB 1.0 and 2.0. A SQL injection exists in the catid parameter used in the view action (view.php) passed to index.php, enabling remote attackers to manipulate the database. The NVD notes a base score of 7.5 (HIGH) with network access and low complexity. Affected versions...

CVE-2005-2709

The CVE-2005-2709 issue affects the Linux kernel's sysctl.c in kernels prior to 2.6.14.1. Local users could exploit a window created by opening an interface file under /proc/sys/net/ipv4/conf/, wait for the interface to unregister, then read/modify function pointers in memory used for the ctl_tab...

CVE-2005-3354

Stack-based buffer overflow in the ldifgetline function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines...

CVE-2005-3351

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

CVE-2005-3354

Stack-based buffer overflow in the ldifgetline function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines...

CVE-2005-3351

CVE-2005-3351 affects SpamAssassin 3.0.4, where an e-mail with an extremely large number of recipients causes a bus error in Perl, bypassing spam detection and potentially impacting mail processing. Public advisories (RH/CentOS/SUSE) describe a denial-of-service risk and direct upgrade to SpamAss...

CVE-2005-3354

Sylpheed

CVE-2005-3694

centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service segmentation fault and crash via short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus...

CVE-2005-3694

centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service segmentation fault and crash via short zero-length packets, and possibly packets of length 1 or 2, as demonstrated using Nessus...

CVE-2005-3694

CenterICQ (centericq) vulnerability CVE-2005-3694 affects the multi-protocol text-mode IM client. In versions around 4.20.0 (including 4.20.0-r3 with Enable peer-to-peer communications), the service can be remotely crashed by sending short zero-length packets (and possibly 1–2 byte packets) over ...

SA027.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SecurityAlert SA027 Author: sp3x GPG: http://securityreason.com/key/sp3x.gpg Date: 15. November 2005 Affected software : =================== PHPNuke version : 7.8 with all security fixes/patches Not Affected software : ======================= PHPNuke...

[SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 901-1 [email protected] http://www.debian.org/security/ Martin Schulze November 19th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 901-1 [email protected] http://www.debian.org/security/ Martin Schulze November 19th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3685

Cross-site scripting XSS vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter...

CVE-2005-3686

SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the 1 DateFrom or 2 DateUntil parameter to forum.php...

CVE-2005-3690

Affected software: MailEnable Professional 1.6 and earlier; MailEnable Enterprise 1.1 and earlier (IMAP server meimaps.exe). Issue: Stack-based buffer overflow when processing overly long mailbox names in IMAP commands (SELECT, CREATE, DELETE, RENAME, SUBSCRIBE, UNSUBSCRIBE), allowing remote atta...

CVE-2005-3687

CVE-2005-3687 affects WHM AutoPilot 2.5.30 and earlier. A flaw in cancel_account.php lets remote attackers cancel requests for arbitrary accounts by modifying the c parameter. The NVD metrics indicate a NETWORK attack with LOW complexity, requiring no authentication, causing PARTIAL integrity imp...

CVE-2005-3686

CVE-2005-3686 describes an SQL injection vulnerability in the Unclassified NewsBoard (UNB) product. The issue resides in the search.inc.php component and is exploitable via the forum.php path using the (1) DateFrom or (2) DateUntil parameters. The root cause is improper handling of user-supplied ...