CVE-2005-2643

CVE-2005-2643 affects Tor client versions up to 0.1.0.13 (and some 0.1.1.4-alpha builds) and describes a weakness in the ephemeral DH handshake that fails to reject certain weak keys. The consequence is that a malicious first-hop Tor server could learn the keys used for the rest of the circuit, e...

CVE-2005-2648

W-Agora is affected by CVE-2005-2648: a directory traversal in index.php via the site parameter allows remote reading of arbitrary files on affected versions (W-Agora 4.2.0 and earlier). OpenVAS/Nessus entries corroborate this vulnerability and indicate remediation by upgrading to a fixed release...

CVE-2005-0359

CVE-2005-0359 is documented in the connected Nessus plugins as affecting EMC Legato NetWorker and related Sun StorEdge/Sun Solstice/Informix Storage Manager products. The entries describe multiple vulnerabilities that can lead to denial of service, unauthorized access and remote command execution...

CVE-2005-2632

SQL injection vulnerability in loginadminmediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2005-2634

CVE-2005-2634 affects WinFtp Server 1.6.8; the vulnerability is a buffer overflow in the Log-SCR function of the "Log to Screen" feature. An attacker can trigger a long request to cause a remote denial of service (application crash) and potentially execute arbitrary code. The connected documents ...

CVE-2005-2636

The CVE-2005-2636 issue affects phpAdsNew/phpPgAds prior to version 2.0.6, where the libraries/lib-view-direct.inc.php clientid parameter enables SQL injection. This allows remote attackers to execute arbitrary SQL commands against the backend. The only concrete detail available is that the vulne...

CVE-2005-2637

PHPFreeNews 1.40 and earlier contains multiple SQL injection vulnerabilities. Remote attackers can manipulate SQL via (1) Match or (2) CatID parameters to SearchResults.php, or (3) the password to AccessControl.php. Affected product/version: PHPFreeNews 1.40 and earlier. Root cause: unsafely hand...

CVE-2005-2640

The CVE describes a behavioral discrepancy information leak in Juniper Netscreen VPNs running ScreenOS 5.2.0 and earlier. When using IKE with pre-shared key authentication, remote attackers can enumerate valid usernames by sending an IKE Aggressive Mode packet: a response is generated for valid u...

CVE-2005-0357

The CVE applies to EMC Legato NetWorker, Sun Solstice Backup 6.0–6.1, and StorEdge Enterprise Backup 7.0–7.2, which rely on AUTH_UNIX authentication based on user IDs. The underlying issue allows remote attackers to bypass authentication by spoofing a username or UID, enabling privilege escalatio...

CVE-2005-2639

CVE-2005-2639 describes a buffer overflow in Chris Moneymaker's World Poker Championship 1.0 that can be triggered by a long nickname, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The CVSS v2 base score is 7.5 (HIGH) with network access, low attac...

CVE-2005-2640

Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but...

CVE-2005-2632

CVE-2005-2632 affects mediabox404 versions 1.2 and earlier. The issue is a SQL injection in login_admin_mediabox404.php triggered via the User field, enabling remote execution of arbitrary SQL commands. The connected documents provide the vulnerability description and CVE metadata but do not incl...

CVE-2005-2638

CVE-2005-2638 concerns multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via (1) the NewsMode parameter to NewsCategoryForm.php, or (2) the Match or (3) NewsMode parameter to SearchResults....

CVE-2005-0359

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmapset and pmapunset commands, which allows remote attackers to 1 cause a denial of service by using pmapunset to un-register a NetWorker...

CVE-2005-0357

EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTHUNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID...

CVE-2005-0358

The provided documents confirm concrete details for CVE-2005-0358. Affected software includes EMC Legato Networker, Sun StorEdge Enterprise Backup, and related Solstice Backup line, with the root cause described as improper verification of authentication tokens that can allow remote privilege mod...

Important: Red Hat Security Advisory: php security update

Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RP...

CVE-2005-2505

CVE-2005-2505 is a vulnerability in Mac OS X (CoreFoundation) affecting Mac OS X 10.3.9 where a buffer overflow in CoreFoundation could allow arbitrary code execution via command line arguments to an application that uses CoreFoundation. The connected documents corroborate the issue and specify t...

CVE-2005-2519

CVE-2005-2519 affects Mac OS X 10.3.9’s Directory Services component (slpd). The vulnerability arises from insecure temporary files created with root privileges, enabling local privilege escalation. The available connected documents confirm the affected product and root cause but do not provide e...

CVE-2005-2509

Technical details of CVE-2005-2509 are not publicly available in the provided documents; no affected products, impact, or remediation details are documented here. Monitor for updates.