CVE-2005-3109

The CVE-2005-3109 entry affects the Linux 2.6 kernel HFS and HFS+ (hfsplus) modules. The issue allows a local attacker to cause a kernel oops/denial of service by mounting a filesystem that is not HFS/HFS+. Public disclosures in Debian (DSA-922-1) and Red Hat/CentOS advisories confirm this vulner...

CVE-2005-3110

CVE-2005-3110 is a race condition in the Linux kernel after the ebtables netfilter module tightens lock handling. In SMP systems under heavy load, a value can be modified after it is read but before it is locked, enabling a remote attacker to cause a kernel crash (DoS). Public advisories referenc...

CVE-2005-3115

CVE-2005-3115 affects mpeg-tools = media-video/mpeg-tools-1.5b-r2. No exploit details are provided beyond the local risk in the linked advisories; no mitigation beyond upgrading is described in the available documents.

CVE-2005-3113

CVE-2005-3113 affects NateOn Messenger: the ActiveX control NateonDownloadManager.ocx lets remote attackers set arguments to GotNate.Excute to download and run arbitrary programs. The impact is remote code execution on the vulnerable host; exploitation status and concrete mitigations are not deta...

[Full-disclosure] iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability

RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability iDEFENSE Security Advisory 09.30.05 www.idefense.com/application/poi/display?id=311&type=vulnerabilities September 30, 2005 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetwor...

[SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 832-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 826-1] New helix-player packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 826-1 [email protected] http://www.debian.org/security/ Michael Stone September 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 825-1] New loop-aes-utils packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 825-1 [email protected] http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 824-1] New ClamAV packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 824-1 [email protected] http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 823-1] New util-linux packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 823-1 [email protected] http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 822-1] New gtkdiskfree packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 822-1 [email protected] http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3103

Cross-site scripting XSS vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the 1 title, 2 category, 3 body, 4 extended body, and 5 excerpt form fields in new blog entries...

CVE-2005-3104

mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments...

CVE-2005-3100

Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial of service...

CVE-2005-3091

Cross-site scripting XSS vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug0005751 "thraxisp"...

CVE-2005-3091

Cross-site scripting XSS vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug0005751 "thraxisp"...

CVE-2005-3095

Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter...

CVE-2005-3096

Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter...

CVE-2005-2964

Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism...

CVE-2005-2557

Cross-site scripting XSS vulnerability in viewallset.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug0005959, and a different vulnerability than CVE-2005-3090...