CVE-2005-3315

CVE-2005-3315 affects Novell ZENworks Patch Management 6.x up to 6.2.2.181. The issue is multiple SQL injection vulnerabilities triggered by requests to reports/default.asp and computers/default.asp, enabling execution of arbitrary SQL commands. The Checkpoint Advisory (CPA I) description states ...

CVE-2005-3122

...

CVE-2005-3380

Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be execut...

CVE-2005-3370

Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be...

ethereal_slimp3_bof.py.txt

Ethereal SLIMP3 Remote Buffer Overflow PoC Bug Discoverd by Vendor?2005-10-19 Coded by Sowhat http://secway.org 2005-10-20 This PoC will crash the Ethereal Tested with Ethereal 0.10.12, WinPcap 3.1 beta4, WinXP SP2 For educational purpose only, Use at your own risk! Version 0.9.1 to 0.10.12...

CVE-2005-3378

CVE-2005-3378 affects Norman 5.81 with the 5.83.02 engine. A interpretation error in handling files containing an MZ (EXE) magic byte sequence causes such files (e.g., BAT, HTML, EML) to be treated as safe types, enabling a “magic byte bug” where content can still execute as dangerous code. The v...

CVE-2005-3380

Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be execut...

CVE-2005-3370

The CVE-2005-3370 entry concerns ArcaVir 2005 package (vulnerable as of 2005-06-21). It describes a body of code that mishandles file type interpretation when encountering a file containing an MZ magic byte sequence in content such as BAT, HTML, or EML, causing the file to be treated as a safe ty...

CVE-2005-3366

The CVE-2005-3366 issue affects PHP iCalendar (PHP iCalendar 2.0a2–2.0.1). The vulnerability is a PHP file inclusion flaw in index.php that uses the phpicalendar cookie to include files, allowing remote code execution and arbitrary local file inclusion. The issue is not XSS per the report. Impact...

CVE-2005-3383

CVE-2005-3383 is a SQL injection vulnerability in Techno Dreams Announcement script, exploitable via the userid parameter in admin/login.asp. Affected component is the login/authentication flow; root cause is unsafely constructed SQL queries allowing remote attackers to execute arbitrary SQL and ...

CVE-2005-3382

The CVE-2005-3382 entry describes a flaw in Sophos 3.91 with the 2.28.4 engine where an interpretation error allows a file (e.g., BAT, HTML, EML) containing an MZ magic byte sequence to be treated as a safe type, enabling bypass of virus scanning. This is a “magic byte bug” vulnerability that cou...

CVE-2005-3367

Cross-site scripting XSS vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML via the name field...

CVE-2005-3374

Summary of CVE-2005-3374 (NVD/NVD-derived): A one-file interpretation bug in the antivirus product F-Prot 3.16c enables a remote attacker to bypass virus scanning by delivering a file type such as BAT, HTML, or EML that carries an “MZ” (EXE) magic byte sequence. This causes the scanner or applica...

CVE-2005-3367

The CVE-2005-3367 entry concerns a Cross-site Scripting (XSS) vulnerability in SparkleBlog 2.1, specifically in journal.php where the name field can be injected with arbitrary script/HTML. Evidence from the NVD/CVE records confirms the affected software (SparkleBlog 2.1) and the vulnerable compon...

CVE-2005-3380

CVE-2005-3380 affects Panda Titanium 2005 4.02.01. A multiple interpretation error lets a file such as BAT, HTML, or EML containing an MZ magic byte sequence (normally associated with EXE) be treated as a safe type, yet could still be executed as a dangerous file type by end-system applications. ...

CVE-2005-3379

CVE-2005-3379 describes a multiple interpretation error in Trend Micro products: PC-Cillin 2005 (version 12.0.1244 with engine 7.510.1002) and OfficeScan 7.0 (engine 7.510.1002). The bug arises from how the scanner handles files with an "MZ" magic byte sequence (normally associated with EXE). Suc...

CVE-2005-3375

CVE-2005-3375 involves an interpretation error in the Ikarus demo version where a file with a BAT/HTML/EML content containing an MZ magic-byte is treated as a safe type, enabling a remote attacker to bypass virus scanning. The vulnerability is demonstrated by a “triple headed” program containing ...

CVE-2005-3364

CVE-2005-3364 concerns multiple SQL injection vulnerabilities in DboardGear. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the buddy parameter in buddy.php, (2) the u2uid parameter in u2u.php, and (3) an invalid theme file in the themes action to ctrtools.ph...

CVE-2005-3363

SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in 1 showcat.php and 2 add.php...

CVE-2005-3378

Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still b...