CVE-2005-3270

The CVE-2005-3270 entry concerns Symantec Norton AntiVirus 9.0.3 and a DiskMountNotify component. The vulnerability is an untrusted search path that allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file. This is a local privilege escalation i...

CVE-2005-3261

getversions.php in versatileBulletinBoard vBB 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-3274

Race condition in ipvsconnflush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service null dereference by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is...

CVE-2005-3182

CVE-2005-3182 : A buffer overflow in the HTTP management interface of GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code by sending overly long HTTP headers (notably Host and Accept ). The issue is described as occurring in the web/HTTP management component, with the vendor no...

CVE-2005-3262

CVE-2005-3262 relates to a format string vulnerability in WinRAR (RARLAB) versions 2.90 through 3.50. The issue arises when WinRAR displays diagnostic errors for an invalid filename, where format string specifiers in a UUE/XXE file are not properly handled, allowing remote attackers to execute ar...

CVE-2005-3264

Zeroblog is affected by a Cross-Site Scripting (XSS) vulnerability in thread.php via the threadID parameter, observed in Zeroblog 1.1f and 1.2a. The issue is caused by insufficient input sanitization on threadID, allowing arbitrary web script or HTML to be injected by a remote attacker. Connected...

CVE-2005-3269

This CVE affects multiple directory server products via a stack-based buffer overflow in help.cgi in the HTTP administrative interface, allowing remote attackers to cause a denial of service or, for local users, gain root privileges. Affected are Sun Java System Directory Server 5.2 (2003Q4, 2004...

CVE-2005-3276

CVE-2005-3276 affects the Linux 2.6 kernel: the sys_get_thread_area path in process.c may copy an uninitialized data structure to userspace, exposing kernel memory to a local user. Affected versions are 2.6 before 2.6.12.4 and 2.6.13. The impact is information disclosure of kernel data to untrust...

CVE-2005-3121

The CVE-2005-3121 issue affects module-assistant prior to version 0.9.10. A rule file used by this tool creates a temporary file insecurely, enabling local users to perform unauthorized operations. Public advisories (DSA-867-1) from Debian and related OpenVAS/NVD entries corroborate the local-fil...

CVE-2005-3268

CVE-2005-3268 concerns yiff server (yiff-server) 2.14.2 on Debian GNU/Linux. The vulnerability arises because the process runs as root and does not properly verify ownership of files it opens, enabling local users to read arbitrary files. The connected documents confirm the affected product/versi...

CVE-2005-3261

CVE-2005-3261 affects versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerability is in getversions.php, which unintentionally lists the versions of all installed scripts and can be triggered by a direct remote request. This leads to information disclosure of installed components. The provided docu...

CVE-2005-3271

CVE-2005-3271 affects the Linux kernel 2.6 series. Description and multiple advisories (SUSE, Debian, Mandriva) show exec() does not properly clear posix-timers in multi-threaded environments, causing a resource leak. This can enable a large number of local users to cause a denial of service by e...

CVE-2005-3258

CVE-2005-3258 affects Squid 2.5 STABLE11 and earlier, where the rfc1738_do_escape function in ftp.c can be triggered by certain FTP responses to cause a denial-of-service (segmentation fault). The connected advisories and scans consistently reference Squid updates to address this issue (e.g., Fed...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

CVE-2005-3258

The rfc1738doescape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain "odd" responses...

CVE-2005-3260

CVE-2005-3260 describes multiple XSS flaws in versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via the url parameter in dereferrer.php and the file parameter in imagewin.php. The NVD entry lists a MEDIUM base score (CVSS2: AV:N/AC:...

CVE-2005-2971

CVE-2005-2971 : Heap-based buffer overflow in the KWord RTF importer of KOffice 1.2.0–1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file. Root cause: buffer overflow in the importer. Affected software is the KWord component of KOffice; multiple advisories (e.g., Debian...

CVE-2005-3259

The CVE-2005-3259 entry concerns multiple SQL injection flaws in versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerabilities affect several entry points and query parameters (including login, “search this thread,” “search for posts,” “forgot password,” and various index.php parameters such as lis...

CVE-2005-3269

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for 1 Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, 2 Red Hat Directory Server and 3 Certificate Server before 7.1 SP1, 4 Sun ONE Directory Server 5.1 SP4 and earlier, and 5 Sun ONE Administration Serv...

CVE-2005-2759

CVE-2005-2759 (LiveUpdate) and CVE-2005-3270 (DiskMountNotify) describe local privilege escalation in Symantec Norton AntiVirus for Macintosh 9.0.3. The illustrations show that the jlucaller binary (LiveUpdate) and DiskMountNotify are setuid root and rely on user-supplied input or PATH handling t...