CVE-2005-3109

The HFS and HFS+ hfsplus modules in Linux 2.6 allow attackers to cause a denial of service oops by using hfsplus to mount a filesystem that is not hfsplus...

BELL-CVE-2005-3108 CVE-2005-3108 does not affect BellSoft software

Bulletin has no description...

CVE-2005-3108

mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a certain memory map that causes the iounmap to perform a lookup of a page that does not exist...

CVE-2005-3111

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack...

BELL-CVE-2005-3107 CVE-2005-3107 does not affect BellSoft software

Bulletin has no description...

[SECURITY] [DSA 829-1] New mysql packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 829-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 809-2] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-2 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 809-2] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-2 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3060

CVE-2005-3060 affects IBM AIX getconf in AIX 5.2–5.3, due to a buffer overflow in the getconf utility. Exploitation would be local (authenticated) and may allow arbitrary code execution on the affected host. The CERT/IBM documentation identifies IBM as vendor and points to updates (IY73814, IY738...

CVE-2005-2917

The CVE-2005-2917 issue affects the Squid proxy server (2.5.STABLE10 and earlier) during NTLM authentication, where certain crafted request sequences can crash the daemon. Impact described in multiple advisories: a remote attacker could terminate the Squid process, causing a denial of service wit...

CVE-2005-3106

CVE-2005-3106 is a Linux kernel race condition affecting thread management when memory mappings are shared (CLONE_VM). The issue can lead to a local denial of service via deadlock, e.g., by triggering a core dump or waiting-for-exec scenarios. Connected advisories confirm this CVE across multiple...

CVE-2005-3112

CVE-2005-3112 affects Macromedia Breeze 5.0: the reset password feature stores passwords in plaintext in the database instead of hashing. This allows anyone with database access to obtain user passwords. The provided documents do not specify exploit details, affected versions beyond Breeze 5.0, o...

CVE-2005-3107

CVE-2005-3107 affects the Linux kernel 2.6 family, where a local attacker tracing a thread that shares the same memory map can cause a denial of service (deadlock) by forcing a core dump when the traced thread is in TASK_TRACED. Public advisories (e.g., RHSA-2006:0437, CESA-2006:0437) document th...

CVE-2005-3108

CVE-2005-3108 affects the Linux kernel 2.6 on AMD64 (and a bug in the ioremap() path). Local users could trigger a denial of service or information leak by performing an ioremap on a memory map and causing iounmap to look up a non-existent page. Public advisories from Debian, Ubuntu, Red Hat/Cent...

CVE-2005-3111

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack...

CVE-2005-2962

The ntlmaps package is affected. The post-installation script for ntlmaps before version 0.9.9 changes the configuration file to world-readable, allowing local users to read the Windows NT username and password ntlmaps connects to. Debian advisories (DSA-830-1) state this has been fixed in 0.9.9-...

CVE-2005-2660

CVE-2005-2660 affects apachetop 0.12.5 and earlier. The vulnerability arises from insecure temporary file creation: atop.debug in the code path uses a fixed path and mode that allows a symlink attack to overwrite or create arbitrary files with the privileges of the user running apachetop. The Deb...

CVE-2005-2962

Removed by vendor...

CVE-2005-3106

Race condition in Linux 2.6, when threads are sharing memory mapping via CLONEVM such as linuxthreads and vfork, might allow local users to cause a denial of service deadlock by triggering a core dump while waiting for a thread that has just performed an exec...

CVE-2005-3114

CVE-2005-3114 describes a buffer overflow in the NateOn Messenger ActiveX control (NateonDownloadManager.ocx) that allows remote attackers to crash the application and potentially execute arbitrary code via a long third argument to the GotNate.Excute method. The vulnerability affects the ActiveX ...