CVE-2005-3490

CVE-2005-3490 affects the web server in Asus Video Security (versions 3.5.0.0 and earlier). The issue is a directory traversal vulnerability that lets remote attackers read arbitrary files by providing directory traversal sequences ("../" or "..\"). The vulnerability arises in the web server comp...

CVE-2005-3496

CVE-2005-3496: XSS in PHP Handicapper via msg parameter to msg.php; second vector via login parameter to process_signup.php is reported as CRLF injection (CVE-2005-4712) per sources. CVE-2005-3497: SQL injection via serviceid parameter in process_signup.php. Exploitation details are not provided ...

[Full-disclosure] Ad[Full-disclosure] Advisory: Apple QuickTime Player Remote Integer Overflow (2)

Apple QuickTime Player Remote Integer Overflow 2 by Piotr Bania [email protected] http://pb.specialised.info All rights reserved. CVE-ID: CVE-2005-2754 Original location: http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt Severity: Critical - remote code execution. Software affected...

CVE-2005-3495

CVE-2005-3495 affects Ar-blog (versions 5.2 and earlier). The vulnerability allows remote attackers to bypass authentication by manipulating cookies, indicating a flaw in how session/authentication state is enforced. The available documents confirm the vulnerability pattern (cookie-based auth byp...

[Full-disclosure] Advisory: Apple QuickTime PICT Remote Memory Overwrite

Apple QuickTime PICT Remote Memory Overwrite by Piotr Bania [email protected] http://pb.specialised.info All rights reserved. CVE-ID: CVE-2005-2756 Original location: http://pb.specialised.info/all/adv/quicktime-pict-adv.txt Severity: Critical - remote code execution. Software affected:...

Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

CVE-2005-3491

CVE-2005-3491 affects FlatFrag 0.3 and earlier. The vulnerability is in the receiver function of loop.c, where multiple buffer overflows can be triggered by the fields version, name, and model. This allows remote attackers to execute arbitrary code. The available documents do not specify the exac...

Fedora Core 3 : libungif-4.1.3-1.fc3.2 (2005-1045)

The libungif package contains a shared library of functions for loading and saving GIF format image files. The libungif library can load any GIF file, but it will save GIFs only in uncompressed format; it will not use the patented LZW compression used to save 'normal' compressed GIF files. A bug...

CVE-2005-3489

CVE-2005-3489 : Buffer overflow in Asus Video Security 3.5.0.0 and earlier when using authorization allows remote attackers to execute arbitrary code via a long username/password string. The issue is triggered through crafted login data over the network (no authentication interaction required). A...

CVE-2005-3494

CVE-2005-3494 describes a cross-site scripting (XSS) flaw in Ar-blog versions 5.2 and earlier. The vulnerability allows a remote attacker to inject arbitrary web script or HTML through a blog comment, potentially compromising user sessions or displaying malicious content. The connected documents ...

CVE-2005-3497

CVE-2005-3497 describes a SQL injection in PHP Handicapper’s process_signup.php via the serviceid parameter. Affected software is PHP Handicapper; vulnerability is in the server-side handling of the serviceid input, enabling remote attackers to execute arbitrary SQL commands. The issue was initia...

RHEL 2.1 / 3 / 4 : wget (RHSA-2005:812)

Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A stack based buffer overflow bug was found ...

CVE-2005-2974

CVE-2005-2974 affects the giflib/libungif GIF decoder. Several connected advisories (Red Hat RHSA-2009:0444, Oracle/ELSA-2009-0444, CentOS/CESA-2009:0444, SUSE SLES9, Scientific Linux) document that specially crafted GIF images could cause a crash and, in some reports, potentially allow arbitrary...

CVE-2005-3350

CVE-2005-3350 is a vulnerability in the giflib/libungif GIF decoder (libungif before 4.1.0) that can lead to an out-of-bounds write and memory corruption when processing a crafted GIF file. Multiple connected sources confirm two CVEs associated with this issue: CVE-2005-2974 and CVE-2005-3350, wi...

Fixed in Apache Tomcat 5.5.13, 5.0.SVN

Low: Directory listing CVE-2006-3835 This is expected behaviour when directory listings are enabled. The semicolon ; is the separator for path parameters so inserting one before a file name changes the request into a request for a directory with a path parameter. If directory listings are enabled...

CVE-2005-3492

CVE-2005-3492 affects FlatFrag 0.3 and earlier. The issue is a denial of service caused by a remote attacker sending an NT_CONN_OK command from a client that is not connected, triggering a null dereference. The documented impact is a crash. The Connected documents do not provide additional exploi...

RHEL 3 / 4 : curl (RHSA-2005:807)

Updated curl packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of the supported protocols. A stack...

Fedora Core 4 : libungif-4.1.3-3.fc4.2 (2005-1046)

The libungif package contains a shared library of functions for loading and saving GIF format image files. The libungif library can load any GIF file, but it will save GIFs only in uncompressed format; it will not use the patented LZW compression used to save 'normal' compressed GIF files. A bug...

RHEL 2.1 / 3 / 4 : libungif (RHSA-2005:828)

Updated libungif packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libungif package contains a shared library of functions for loading and saving GIF format image files. Several bugs i...

Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...