CVE-2005-1914

CVE-2005-1914 affects CenterICQ versions 4.20.0 and earlier. The vulnerability arises because CenterICQ creates temporary files with predictable file names, enabling a local attacker to perform a symlink attack to overwrite arbitrary files via the gg.token.PID temporary file. The connected source...

CVE-2005-2287

CVE-2005-2287 affects SoftiaCom WMailServer versions 1.0 and 2.0. A remote attacker can cause an application crash ( DoS ) by sending a large TCP packet with a leading space, which may trigger a buffer overflow in the SMTP service. Connected documents confirm public PoCs/Exploits (e.g., Metasploi...

CVE-2005-2281

CVE-2005-2281 affects WebEOC prior to version 6.0.2. The issue is a weak encryption scheme used for passwords, which could enable attackers to crack passwords. Red Hat and CVE aggregations, as well as CERT/PTSecurity references, confirm the scope to WebEOC with versions before 6.0.2. The remediat...

CVE-2005-2284

WebEOC prior to version 6.0.2 contains multiple SQL injection vulnerabilities that allow remote attackers to modify SQL statements, potentially viewing or modifying data or issuing database commands. Affected component is the WebEOC web application; the underlying issue is improper input filterin...

CVE-2005-2294

Affected software: Oracle Forms on Unix (versions 4.5, 6.0, 6i, 9i). Vulnerability: when a large number of records are retrieved by an Oracle form, a copy of the database tables is stored in a world-readable temporary file. Root cause: insecure temporary file handling enabling a local user to rea...

CVE-2005-2290

wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...

CVE-2005-2295

CVE-2005-2295 affects NetPanzer 0.8 and earlier. A remote attacker can cause a denial of service by sending a packet with a zero datablock size, triggering an infinite loop. The provided sources describe the vulnerable component and impact but do not include exploits, specific versions beyond the...

CVE-2005-2290

CVE-2005-2290 affects WPS Web Portal System 0.7.0, where the CGI script wps_shop.cgi exposes arbitrary command execution via shell metacharacters in the art and cat parameters. This enables remote attackers to run commands on the vulnerable host. The provided sources confirm remote code execution...

CVE-2005-1689

CVE-2005-1689 is a double-free vulnerability in the MIT Kerberos 5 (krb5) implementation, specifically in the krb5_recvauth() routine. Connected advisories describe that a remote, unauthenticated attacker could trigger memory corruption, potentially causing a denial of service and, in some disclo...

CVE-2005-2296

CVE-2005-2296 affects YabbSE 1.5.5c. The vulnerability allows remote attackers to obtain sensitive information by directly requesting ssi_examples.php, which reveals the installation path. Public details in the provided documents do not specify affected versions beyond 1.5.5c, nor do they describ...

CVE-2005-1175

CVE-2005-1175 is a heap-based buffer overflow in MIT Kerberos 5 (krb5) 1.4.1 and earlier in the KDC, exploitable by remote attackers via a certain valid TCP/UDP request to cause a denial of service and potentially execute arbitrary code. The vulnerability is unauthenticated and can impact Kerbero...

Solaris 10 (x86) : 120086-02

SunOS 5.10x86: patch usr/sbin/in.ftpd. Date this patch was last updated by Sun : Apr/16/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

DSA-757-1 krb5 - buffer overflow, double-free memory

Bulletin has no description...

CVE-2005-1174

CVE-2005-1174 affects MIT Kerberos 5 (krb5) KDC; a remote attacker can crash the KDC by sending a certain TCP connection that frees memory twice (heap corruption). The related issues include CVE-2005-1175 (potential remote code execution via a rare TCP request triggering a buffer overflow) and CV...

RHEL 3 : cups (RHSA-2005:571)

Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating system...

CVE-2005-2277

Affected software: Affix Bluetooth FTP client (BTFTP) used in Nokia Affix 2.1.2 and 3.2.0. Description: CVE-2005-2277 describes a vulnerability where missing input sanitising before executing shell commands allows a remote attacker to run arbitrary commands via shell metacharacters in the filenam...

[Full-disclosure] Silently fixed security bugs in Oracle Critical Patch Update July 2005

Hello BugTraq-Reader After reading the patch documentation and some tests with the CPU July 2005 I found out that Oracle fixed some security bugs silently without mention these bugs in their current risk matrix. Detailed information about most of these bugs are not available via Metalink but in...

articleLive2005.txt

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah SPECIAL OFFER Hire my auditing services, if I dont fin...

CVE-2002-2005

Technical details about CVE-2002-2005 are not publicly available in the provided documents. No concrete affected product/version, root cause, or remediation are described here. Monitor for updates from trusted sources.

[SECURITY] [DSA 746-1] New packages fix remote command execution in phpgroupware

------------------------------------------------------------------------ Debian Security Advisory DSA 746-1 [email protected] http://www.debian.org/security/ Michael Stone July 13, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...