CVE-2005-2516

CVE-2005-2516 affects Safari on Mac OS X 10.3.9 and 10.4.2 where rendering RTF content can bypass security checks on hyperlinks, potentially allowing remote command execution. Root cause: improper handling of hyperlinks in rich text content. Impact: remote code execution with no user interaction ...

CVE-2005-2515

Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required...

CVE-2005-2510

CVE-2005-2510 affects Mac OS X 10.4–10.4.2: The Server Admin tool (servermgr_ipfilter) may fail to correctly write firewall rules to Active Rules when using multiple subnets and Address Groups, potentially resulting in policies that are less restrictive than intended. Impact is limited to local a...

CVE-2005-2523

CVE-2005-2523 concerns multiple XSS vulnerabilities in Mac OS X 10.4 Weblog Server (Mac OS X Server 10.4 to 10.4.2). The flaw affects the Weblog Server component and allows remote attackers to inject arbitrary script via weblog comments; root cause is incomplete input filtering. Impact described ...

CVE-2005-2513

The CVE-2005-2513 entry concerns HItoolbox for Mac OS X 10.4.2 where VoiceOver can read secure input fields, implying a UI/input security bypass. The exact root cause and vulnerable components are not fully detailed in the provided documents, but the NVD entry assigns a Medium severity (CVSSv2 ba...

CVE-2005-2627

Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via 1 kernel headers in a pcap file or 2 data frame dissection, which leads to heap-based buffer overflows...

CVE-2005-2502

CVE-2005-2502 is a buffer overflow in Apple’s Mac OS X AppKit that handles Microsoft Word files. The vulnerability affects AppKit-based applications (e.g., TextEdit) on Mac OS X 10.3.9 and 10.4.2 and could allow an attacker to execute arbitrary code via a crafted Word document. The root cause is ...

CVE-2005-2514

CVE-2005-2514 affects Mac OS X 10.3.9 where a buffer overflow in the ping utility allows local users to execute arbitrary code. The initial description confirms the vulnerability vector is local and the impact is arbitrary code execution, with the affected component being the ping utility on Mac ...

CVE-2005-2512

The CVE-2005-2512 entry concerns Mail.app on macOS 10.4.2 and earlier. The issue: when printing or forwarding an HTML message, Mail.app loads remote images even if the user’s preferences say otherwise, creating a potential privacy leak. The connected documents confirm the affected product and the...

Fedora Core 3 : cups-1.1.22-0.rc1.8.6 (2005-733)

These updated packages fix a problem handling PDF files that could have security implications CVE-2005-2097. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora Core 4 : cups-1.1.23-15.1 (2005-732)

These updated packages fix a problem handling PDF files that could have security implications CVE-2005-2097. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

NOVL-2005010098073 GroupWise Password Caching

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2005-10098073 Title: GroupWise Password Caching Date: 16-August-2005 Revision: Original Product Name: GroupWise 5.x, 6.x OS/Platforms:...

Solaris 10 (sparc) : 120467-05

SunOS 5.10: lp patch. Date this patch was last updated by Sun : Sep/08/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0...

Fedora Core 4 : xpdf-3.00-20.FC4.2 (2005-729)

A flaw was discovered in Xpdf in that an attacker could construct a carefully crafted PDF file that would cause Xpdf to consume all available disk space in /tmp when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2097 to this issue. Users of xpdf should upgrad...

Solaris 10 (sparc) : 119593-01

SunOS 5.10: net-svc patch. Date this patch was last updated by Sun : Aug/08/05 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 9 (sparc) : 112811-02

OpenWindows 3.7.0: Xview Patch. Date this patch was last updated by Sun : Aug/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 119902-01

Openwindows 3.7.0x86: Xview Patch. Date this patch was last updated by Sun : Aug/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Fedora Core 3 : xpdf-3.00-10.6.FC3 (2005-730)

A flaw was discovered in Xpdf in that an attacker could construct a carefully crafted PDF file that would cause Xpdf to consume all available disk space in /tmp when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2097 to this issue. Users of xpdf should upgrad...

Mac OS X Multiple Vulnerabilities (Security Update 2005-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2005-007 applied. This security update contains fixes for the following products : - Apache 2 - AppKit - Bluetooth - CoreFoundation - CUPS - Directory Services - HItoolbox - Kerberos - loginwindow -...

Solaris 10 (x86) : 119594-01

SunOS 5.10x86: net-svc patch. Date this patch was last updated by Sun : Aug/08/05 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrando...