Apple Safari fails to perform security checks on links in rich text content

Overview Apple Safari fails to perform security checks on hyperlinks in rich text content, which may allow an attacker to execute arbitrary commands on a vulnerable system. Description Mac OS X includes the Safari web browser, which can display rich text RTF files directly. When Safari opens a ri...

Apple Mac OS X Server servermgrd authentication vulnerable to buffer overflow

Overview Apple Mac OS X Server servermgrd contains an unspecified buffer overflow vulnerability in the authentication handling routines. This vulnerability may lead to remote execution of arbitrary code. Description Mac OS X Server contains the servermgrd application for back-end management...

Apple Mac OS X AppKit vulnerable to buffer overflow via maliciously crafted Microsoft Word files

Overview A buffer overflow vulnerability exists in a component of Apple's Mac OS X operating system that handles Microsoft Word files. Description The Cocoa Application Framework also referred to as the Application Kit, or AppKit is one of the core Cocoa frameworks supplied with Apple's Mac OS X...

KLA10377 WLF vulnerability in Veritas Backup Exec

An insecure auth was found in Veritas Backup Exec. By exploiting this vulnerability malicious users can read & write arbitrary code. This vulnerability can be exploited remotely at a point related to NDMP agent. Original advisories Symantec bulletin Related products VERITAS-Backup-Exec CVE list...

Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update

Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader allows users to view and print documents in portable document format PDF. A buffer overflow bug has...

[SECURITY] [DSA 776-1] New clamav packages fix several problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 776-1 [email protected] http://www.debian.org/security/ Martin Schulze August 16th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2559

CVE-2005-2559 affects the e107 web portal’s ePing plugin (versions 1.02 and earlier). The vulnerability arises from improper handling/validation of the eping_count and eping_host parameters in doping.php, allowing shell metacharacters to be injected and used in system() calls. Consequence: remote...

CVE-2005-2578

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2552. Reason: This candidate is a duplicate of CVE-2005-2552. Notes: All CVE users should reference CVE-2005-2552 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2586

The CVE concerns a Mentor ADSL-FR4II router with firmware 2.00.0111 that stores the web administration password in cleartext inside the backup configuration file. This exposes sensitive credentials to local users who can access the backup config, enabling partial confidentiality impact as describ...

CVE-2005-2578

CVE-2005-2578 is rejected/not used and does not represent an active vulnerability entry.

CVE-2005-2097

CVE-2005-2097 affects xpdf and variants such as gpdf (and related components like CUPS’ pdftops) where carefully crafted PDFs can cause a denial of service by exhausting disk space (creating a large temporary file). Public sources in the connected documents confirm heap-based overflows and DoS po...

CVE-2005-2103

Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n...

CVE-2005-2584

Affected product: Mentor ADSL-FR4II router (firmware 2.00.0111). Vulnerability: The web administration interface does not set a default password, allowing local users to gain access. Impact: local access with likely full control over the device. Root cause (as stated): lack of a default password ...

CVE-2005-2103

Summary of CVE-2005-2103 (Gaim AIM/ICQ buffer overflow) : The AIM/ICQ protocol handler in Gaim up to version before 1.5.0 is vulnerable to a heap/away-message buffer overflow. A remote attacker can send a crafted away message containing many AIM substitution strings (e.g., %t, %n), potentially ca...

CVE-2005-2470

Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

CVE-2005-2563

CVE-2005-2563 involves multiple XSS vulnerabilities in Gravity Board X (GBX) 1.1. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the board_id parameter to deletethread.php and (2) the template. The cited sources describe the affected software and the two attack ve...

CVE-2005-2577

Wyse Winterm 1125SE devices running firmware 4.2.09f or 4.4.061f are reported vulnerable to a remote denial of service via a crafted IP packet with a zero in the IP option length field, per CVE-2005-2577. The vulnerability targets the device’s network stack and can cause a crash without requiring...

CVE-2005-2558

CVE-2005-2558 describes a stack-based buffer overflow in the init_syms function of MySQL. The flaw occurs in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, triggered by a long function_name field when creating user-defined functions (UDFs). The vulnerability allows remote ...

CVE-2005-2569

Affected software: FunkBoard 0.66CF (and possibly earlier). Vulnerability: multiple cross-site scripting (XSS) flaws allow remote attackers to inject arbitrary script/HTML via numerous parameters across several pages (register.php, editpost.php, prefs.php, newtopic.php, reply.php, profile.php); l...

CVE-2005-2587

PHPTB Topic Boards 2.0 is affected by a SQL injection in emailvalidate.php that allows remote attackers to execute arbitrary SQL commands via the mid parameter. Root cause is improper input handling in emailvalidate.php leading to SQL manipulation. Documented impact includes potential exposure or...