FreeBSD : phppgadmin -- 'formLanguage' local file inclusion vulnerability (88188a8c-eff6-11d9-8310-0001020eed82)

A Secunia Advisory reports : A vulnerability has been reported in phpPgAdmin, which can be exploited by malicious people to disclose sensitive information. Input passed to the 'formLanguage' parameter in 'index.php' isn't properly verified, before it is used to include files. This can be exploite...

IPSwitch IMail Server 8.15 - IMAPD Remote Code Execution

IPSwitch IMail Server 8.15 - IMAPD Remote Code Execution IpSwitch IMAIL Server IMAPD Remote r00t Exploit by kcope June 2005 Confidential! use IO::Socket; 316 bytes $cbsc = "\xEB\x10\x5B\x4B\x33\xC9\x66\xB9\x25\x01\x80\x34\x0B\xC2\xE2\xFA" ."\xEB\x05\xE8\xEB\xFF\xFF\xFF"...

RHEL 2.1 : dhcpcd (RHSA-2005:603)

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

RHEL 4 : kdelibs (RHSA-2005:612)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:612 advisory. kdelibs contains libraries for the K Desktop Environment. A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite. Depending on...

SUSE-SA:2005:043: zlib

The remote host is missing the patch for the advisory SUSE-SA:2005:043 zlib. The previous zlib update for CVE-2005-2096 fixed a flaw in zlib that could allow a carefully crafted compressed stream to crash an application. While the original patch corrected the reported overflow, Markus Oberhumer...

[SECURITY] [DSA 770-1] New gopher packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 770-1 [email protected] http://www.debian.org/security/ Martin Schulze July 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 769-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 769-1 [email protected] http://www.debian.org/security/ Martin Schulze July 29th, 2005 http://www.debian.org/security/faq -...

uguestbook exploit

hello , By ...... MeSa7eB Data ...... 28/7/2005 pro ...... http://www.uapplication.com/ My web site : http://3asfh.net/vb My Email : [email protected] =============================================== exploit : http://xxx.com/guestbook/mdb-database/guestbook.mdb ==================================...

CVE-2005-2406

CVE-2005-2406 affects Opera 8.01. The vulnerability allows remote attackers to perform cross-site scripting (XSS) or alter which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI. Root cause is input handling during file drag that leads to script execution. ...

dhcpcd security update

CentOS Errata and Security Advisory CESA-2005:603-01 An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of...

Moderate: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. kdelibs contains libraries for the K Desktop Environment. A flaw was discovered affecting Kate, the KDE advanced text...

Moderate: Red Hat Security Advisory: dhcpcd security update

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

[SECURITY] [DSA 765-1] New heimdal packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 765-1 [email protected] http://www.debian.org/security/ Martin Schulze July 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 765-1] New heimdal packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 765-1 [email protected] http://www.debian.org/security/ Martin Schulze July 22nd, 2005 http://www.debian.org/security/faq -...

CVE-2005-2400

The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges...

CVE-2005-2391

The CVE-2005-2391 entry concerns the 3Com OfficeConnect Wireless 11g Access Point, affected before version 1.03.12. The vulnerability is described as unknown but allows remote attackers to obtain sensitive information through the device’s web interface. The connected sources confirm the product a...

CVE-2005-2396

CVE-2005-2396 is a publicly tracked XSS vulnerability affecting MediaWiki 1.4.6 and earlier. The root cause, as described across connected sources, is that the page move template parameter is not properly escaped, allowing remote attackers to inject arbitrary web script or HTML. The impact is tha...

CVE-2005-2393

CVE-2005-2393 affects CuteNews 1.3.6. The vulnerability is a cross-site scripting (XSS) flaw exploitable via two user-supplied parameters: (1) lastusername in index.php and (2) selected_search_arch in search.php. The underlying issue is insufficient input sanitization/escaping, allowing a remote ...

CVE-2005-2385

Vulnerability in avast! antivirus (UNACEV2.DLL) used for ACE archive handling. The issue is a stack-based buffer overflow due to improper boundary checking when scanning ACE files, which can be triggered by a long filename in an ACE archive. This leads to remote code execution with SYSTEM privile...

CVE-2005-2395

Affected software: Mozilla Firefox 1.0.4 and 1.0.5. Vulnerability type / cause: Firefox may not select the strongest available HTTP authentication challenge as required by RFC2617, potentially causing credentials to be sent in plaintext even when an encrypted channel exists. Impact (as stated): c...