CVE-2005-3053

The CVE-2005-3053 issue is a Linux kernel 2.6.x local vulnerability where set_mempolicy accepts a negative first argument, triggering a BUG() and a potential denial of service. The Debian DSAs enumerate CVE-2005-3053 among several local/remote problems in kernel-source-2.6.8 and recommend upgradi...

CVE-2005-3055

CVE-2005-3055 affects the Linux kernel 2.6.8 through 2.6.14-rc2. A local user-space process can issue a USB Request Block (URB) to a USB device and terminate before completion, causing a stale pointer reference and potential kernel OOPS/Denial of Service. Public sources in connected docs confirm ...

CVE-2005-3054

PHP fopen_wrappers.c vulnerability (CVE-2005-3054) affects PHP 4.4.0 and possibly other versions, where open_basedir with a trailing slash can fail to restrict access to directories whose names are substrings of the target path. This enables PHP scripts in one directory to access files in other d...

[SECURITY] [DSA 820-1] New courier packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 820-1 [email protected] http://www.debian.org/security/ Martin Schulze September 24th, 2005 http://www.debian.org/security/faq -...

wzdftpdwarez.pl.txt

0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | / \ / / /\ // |\ \ \ \ / | \ / / // //...

USN-187-1: Linux kernel vulnerabilities

A Denial of Service vulnerability was detected in the stack segment fault handler. A local attacker could exploit this by causing stack fault exceptions under special circumstances scheduling, which lead to a kernel crash. CAN-2005-1767 Vasiliy Averin discovered a Denial of Service vulnerability ...

[SECURITY] [DSA 820-1] New courier packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 820-1 [email protected] http://www.debian.org/security/ Martin Schulze September 24th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3045

SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via the phrase field...

CVE-2005-3052

SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php...

WzdFTPD <= 0.5.4 Remote Command Execution Exploit

Exploit for linux platform in category remote exploits ================================================= WzdFTPD // | // / \ | || || | /\ | / / || / \ / / /\ \ / \ / \ / / | | /\ / / / // /| \ \ / / / VER1 use Net::FTP; sub usage print "usage: wzdftpdwarez.pl remotehost remoteport...

WzdFTPD 0.5.4 - Remote Command Execution

WzdFTPD 0.5.4 - Remote Command Execution 0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | ...

WzdFTPD 0.5.4 - Remote Command Execution

0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | / \ / / /\ // |\ \ \ \ / | \ / / // //...

CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

CVE-2005-2707

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks...

CVE-2005-2701

Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag...

[SECURITY] [DSA 819-1] New python2.1 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 819-1 [email protected] http://www.debian.org/security/ Martin Schulze September 23rd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 819-1] New python2.1 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 819-1 [email protected] http://www.debian.org/security/ Martin Schulze September 23rd, 2005 http://www.debian.org/security/faq -...

CVE-2005-2703

CVE-2005-2703 affects Firefox up to 1.0.7 and Mozilla Suite up to 1.7.12. The issue lets a remote attacker modify HTTP headers of XML HTTP requests made via XMLHttpRequest, potentially enabling attacks such as HTTP request smuggling or splitting. This is triggered by how XMLHttpRequests are handl...

CVE-2005-3052

SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php...

CVE-2005-2707

CVE-2005-2707 affects Mozilla Firefox (before 1.0.7) and Mozilla Suite (before 1.7.12). The issue allows remote attackers to spawn windows without typical UI components (address/status bars), enabling spoofing/phishing. The NVD entry assigns a base score of 5.0 (MEDIUM) with network attack vector...