10535 matches found
CVE-2005-1920
The CVE-2005-1920 issue affects KDE 3.2.x–3.4.0 (kdelibs3/kdebase); backup files could have improper permissions, allowing local users to access sensitive data. Connected advisories (e.g., Debian DSA-804-2, Red Hat RHSA-2005:612, Ubuntu USN-150-1, Gentoo GLSA 200611-21) document security updates ...
CVE-2005-1849
CVE-2005-1849 affects zlib 1.2.2, where inftrees.h can be exploited by a malicious file to cause a denial of service (application crash) via a large dynamic tree. The vulnerability is exploitable remotely and does not require authentication. The initial description confirms the crash is caused by...
CVE-2005-2370
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service bus error on certain architectures such as SPARC via an incoming message...
CVE-2005-2378
Oracle Reports (a component of Oracle Application Server) is affected by CVE-2005-2378 through a directory traversal in the rwservlet when the desformat parameter (or related URI parameters) is crafted with absolute/relative file paths. This allows reading arbitrary files on the Reports Server. T...
CVE-2005-2373
Summary: CVE-2005-2373 affects SlimFTPd, with a buffer overflow in 3.15 and 3.16 triggered by long directory names in certain FTP commands (LIST, and commonly cited DELE/RNFR). The flaw allows remote code execution and requires authenticated access. Root cause: insufficient bounds checking on com...
fetchmail security update
CentOS Errata and Security Advisory CESA-2005:640 Updated fetchmail packages that fix a security flaw are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding utility. A buffer...
CVE-2005-2355
CVE-2005-2355 is rejected/not used and does not represent an active vulnerability entry.
SAP Internet Graphics Server (IGS) Directory Traversal Vulnerability
The version of SAP Internet Graphics Server IGS installed on the remote host is affected by a directory traversal vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP GET request, to access arbitrary files on the remote host with the privileges of the...
RHEL 4 : httpd (RHSA-2005:582)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:582 advisory. The Apache HTTP Server is a powerful, full-featured, efficient, and freely-available Web server. Watchfire reported a flaw that occured when...
RHEL 4 : fetchmail (RHSA-2005:640)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:640 advisory. Fetchmail is a remote mail retrieval and forwarding utility. A buffer overflow was discovered in fetchmail's POP3 client. A malicious server could cau...
[Full-disclosure] Help poor children in Uganda
Georgi Guninski security advisory 75, 2005 Help poor children in Uganda Systems affected: vim 6.3 Date: 25 July 2005 Legal Notice: This Advisory is Copyright c 2005 Georgi Guninski. You may not modify it and distribute it or distribute parts of it without the author's written permission - this...
SlimFTPd 3.16 - Remote Buffer Overflow
/ Written by redsand Jul 22, 2005 Vulnerable: SlimFtpd v3.15 and v3.16 origional vuln found by: Usage: ./redslim 127.0.0.1 OS RET / include include include ifdef WIN include include // pragma lib // win32-lcc specific pragma commentlib, "ws232.lib" // ms vc++ else include include include include...
Fedora Core 3 : kdenetwork-3.3.1-3.2 (2005-623)
Multiple integer overflow flaws were found in the way Kopete processes Gadu-Gadu messages. A remote attacker could send a specially crafted Gadu-Gadu message which would cause Kopete to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project assigned the name...
Fedora Core 4 : zlib-1.2.2.2-5.fc4 (2005-626)
Fri Jul 22 2005 Ivana Varekova 1.2.2.2-5.fc4 - fix bug 163038 - CVE-2005-1849 - zlib buffer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora Core 3 : zlib-1.2.1.2-3.fc3 (2005-625)
Fri Jul 22 2005 Ivana Varekova 1.2.1.2-3.fc3 - fix bug 163038 - CVE-2005-1849 - zlib overflow problem Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora Core 4 : kdenetwork-3.4.1-0.fc4.2 (2005-624)
Multiple integer overflow flaws were found in the way Kopete processes Gadu-Gadu messages. A remote attacker could send a specially crafted Gadu-Gadu message which would cause Kopete to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project assigned the name...
RHEL 4 : cpio (RHSA-2005:378)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:378 advisory. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local malicious user to modif...
Fedora Core 3 : mozilla-1.7.10-1.3.1 (2005-616)
Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A bug was found in the way Mozilla handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or...
RHEL 4 : zlib (RHSA-2005:584)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:584 advisory. Zlib is a general-purpose lossless data compression library that is used by many different programs. A previous zlib update, RHSA-2005:569 CAN-2005-20...