krb5 security update

CentOS Errata and Security Advisory CESA-2005:562 Updated krb5 packages which fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 Sep 2005 krb5-server...

[SECURITY] [DSA 753-1] New gedit packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 753-1 [email protected] http://www.debian.org/security/ Martin Schulze July 12th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2227

Softiacom wMailserver 1.0 is affected by a vulnerability where passwords are stored in plaintext in the Darsite\MAILSRV\Admin registry key, enabling local users to gain administrator privileges. The issue is a local privilege escalation due to insecure credential storage. According to the provide...

CVE-2005-2230

Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...

CVE-2005-2221

Dragonfly Commerce (Dragonfly) is associated with multiple SQL injection vulnerabilities in its web interface. According to the CVE records, remote attackers may modify SQL statements and possibly execute arbitrary SQL commands via user-controlled parameters: (1) key in dc_Categoriesview.asp, (2)...

CVE-2005-2239

CVE-2005-2239 affects oftpd 0.3.7. The vulnerability allows remote attackers to cause a denial of service by sending a USER command containing a large sequence of null (\0) characters. This is documented across multiple sources (NVD, Red Hat, Ubuntu, CVE List). The available entries do not provid...

CVE-2005-2219

CVE-2005-2219 affects Hosting Controller 6.1 Hotfix 2.1. Remote authenticated users can perform unauthorized actions by sending a direct request to AccountActions.asp and modifying the CreditLimit parameter in the UpdateCreditLimit action, enabling changes to user credit limits. The linked Red Ha...

CVE-2005-2226

CVE-2005-2226 affects Microsoft Outlook Express 6.0. The issue leaks the default news server account when a user responds to a “watched” conversation thread, potentially allowing remote attackers to obtain sensitive information. The Red Hat and CVE listings reiterate the same description. No expl...

CVE-2005-2234

Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments...

CVE-2005-2222

Technical details about CVE-2005-2222 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories before drawing conclusions on impact or remediation.

CVE-2005-2215

MediaWiki is affected by a Cross-site scripting (XSS) vulnerability in versions before 1.4.6 (1.4.x) and before 1.5beta3 (1.5.x) due to unsanitized input in the page move template parameter. The issue allows remote attackers to inject arbitrary web script or HTML into pages. The description does ...

CVE-2005-2242

Cisco CallManager (CCM) versions affected: 3.2 and earlier; 3.3 before 3.3(5); 4.0 before 4.0(2a)SR2b; and 4.1 before 4.1(3)SR1. The issue allows remote attackers to cause a denial of service (memory consumption and restart) by sending crafted packets to CTI Manager (ctimgr.exe) or CallManager (c...

CVE-2005-2238

ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service port exhaustion and memory consumption by using all ephemeral ports...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2246

CVE-2005-2246 (iPhotoAlbum 1.1) is affected by multiple PHP remote file inclusion vulnerabilities. The issues enable remote attackers to execute arbitrary code by supplying crafted input to (1) doc_path in getpage.php or (2) set_menu in lib/static/header.php. Root cause: insecure handling of user...

CVE-2005-2244

The CVE-2005-2244 entry concerns Cisco CallManager (CCM) prior to certain 3.x/4.x releases, where the aupair.exe service is vulnerable. A crafted packet can trigger a memory allocation failure, leading to a buffer overflow and allowing remote code execution or memory corruption. Affected products...

CVE-2005-2223

Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service crash during authentication...

CVE-2005-2245

The provided connected documents confirm a vulnerability in F5 BIG-IP versions 9.0.2 through 9.1 that allows attackers to subvert the authentication of SSL transactions. The root cause and attack vectors are described as unknown, with possible involvement of NATIVE ciphers, but no concrete exploi...

CVE-2005-2243

Memory leak in inetinfo.exe in Cisco CallManager CCM 3.2 and earlier, 3.3 before 3.35, 4.0 before 4.02aSR2b, and 4.1 4.1 before 4.13SR1, when Multi Level Admin MLA is enabled, allows remote attackers to cause a denial of service memory consumption via a large number of Admin Service Tool AST logi...

CVE-2005-2243

Cisco CallManager (CCM) memory leak: inetinfo.exe vulnerability affects CCM v3.2 and earlier, v3.3 before 3.3(5), v4.0 before 4.0(2a)SR2b, and v4.1 before 4.1(3)SR1, with MLA enabled. Remote attackers can cause memory exhaustion/DoS by triggering a large number of failing Admin Service Tool (AST)...