Mandrake Linux Security Advisory : tcpdump (MDKSA-2005:101)

A Denial of Service vulnerability was found in tcpdump during the processing of certain network packages. Because of this flaw, it was possible for an attacker to inject a carefully crafted packet onto the network which would crash a running tcpdump session. The updated packages have been patched...

Mandrake Linux Security Advisory : gaim (MDKSA-2005:099)

More vulnerabilities have been discovered in the gaim IM client. The first is a remote crash with the Yahoo! protocol CVE-2005-1269 and the second is a remote DoS in the MSN protocol CVE-2005-1934. These problems have been corrected in gaim 1.3.1 which is provided with this update. %NASLMINLEVEL...

MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422) (uncredentialed check)

The remote version of Windows contains a flaw in the Server Message Block SMB implementation that may allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2005-1757

Technical details about CVE-2005-1757 are not publicly provided in the supplied documents; no concrete affected product/version or exploit specifics are listed beyond the general description. Monitor for updates.

CVE-2005-1208

Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help .CHM file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in...

CVE-2005-1758

Novell NetMail IMAPD is affected by a heap overflow in the IMAP command continuation handling in NetMail versions before 3.52C, enabling unauthenticated remote code execution with the privileges of the NetMail service. Exploitation details are described in iDEFENSE advisory and the Nessus/SEC ref...

CVE-2005-1756

Technical details about CVE-2005-1756 are not publicly provided in the supplied documents. Monitor for updates from the cited advisories and CVE records.

CVE-2005-1208

CVE-2005-1208 describes a remote code execution vulnerability in Microsoft HTML Help (CHM/InfoTech Storage protocols like ms-its, ms-itss, its, mk:@MSITStore). The root cause is an integer overflow/heap-based buffer overflow when processing crafted CHM content with a large size field, exploitable...

CVE-2005-1206

CVE-2005-1206 describes a remote code execution vulnerability in Microsoft Windows SMB implementation. The SMB packet validation process contains a buffer-handling flaw that can allow an unauthenticated attacker to execute arbitrary code by sending specially crafted SMB packets. Affected products...

CVE-2005-1211

CVE-2005-1211 is an Internet Explorer PNG rendering memory corruption vulnerability (CAN-2005-1211) in the pngfilt.dll component that could allow remote code execution if a user opens a crafted PNG. Microsoft addressed this with MS05-025, delivering a security update for IE across affected Window...

CVE-2005-1306

Adobe Reader/Acrobat 7.0 and 7.0.1 are affected by an information-disclosure vulnerability (XML External Entity) that lets remote attackers determine the existence of local files via Javascript containing XML script. Affected component is the Adobe Reader control; root cause is XML External Entit...

CVE-2005-1266

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service CPU consumption and slowdown via a message with a long Content-Type header without any boundaries...

telnet security update

CentOS Errata and Security Advisory CESA-2005:504-00 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-June/074033.html Affected packages: telnet telnet-server...

telnet security update

CentOS Errata and Security Advisory CESA-2005:504 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-June/074020.html https://lists.centos.org/pipermail/centos-announce/2005-June/074022.html...

CVE-2005-1957

The vulnerability concerns mtnpeak.net File Upload Manager, where an improper authentication check allows a remote attacker to modify a base64-encoded file parameter to perform privileged actions. Specifically, the affected component may be exploited to (1) read arbitrary files via the view actio...

CVE-2005-1728

MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials...

CVE-2005-1948

CVE-2005-1948 affects Invision Gallery prior to 1.3.1. The product is vulnerable to multiple SQL injection flaws via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo, due to improper sanitization of user-supplied data. Remote attackers could ex...

CVE-2005-1953

CVE-2005-1953: Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request. Root cause is a heap overflow in the CGI component; exploitation status is not described in the provided documents. No patch/remedi...

CVE-2005-1760

Summary: CVE-2005-1760 affects sysreport up to 1.3.15. When run as root, sysreport includes /etc/sysconfig/rhn/up2date; if a proxy password is configured, that password is written in plaintext in the report, enabling local privilege escalation. Affected software/versions: sysreport 1.3.15 and ear...

CVE-2005-1720

AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL...