CVE-2005-1645

Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information...

CVE-2005-1656

Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space "%20"...

CVE-2005-1657

Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to 1 deletefolder.ctml, 2 deletemessage.ctml, 3 origmessage.ctml, or 4 readmessage.ctml, the Message.Id parameter to editmessage.ctm...

CVE-2005-1645

The CVE describes a vulnerability in Keyvan1 ImageGallery where the image.mdb database is stored under the web document root with insufficient access control, allowing remote attackers to read sensitive information. Impact: partial confidentiality loss. The connected documents do not provide expl...

CVE-2005-1655

AOL Instant Messenger (AIM) 5.5.x and earlier is affected. The vulnerability arises when the client handles a font tag with an invalid smiley icon location in the sml parameter, allowing a remote attacker to cause a denial of service (client crash). The affected component is the AIM client’s pars...

Extreme Networks switches with ExtremeWare XOS allow arbitrary command execution

Overview Some Extreme Networks switches running ExtremeWare XOS have a vulnerability that allows a malicious authenticated user to escape to the underlying operating system command shell with administrator-level root privileges. Description Extreme Network switches running ExtremeWare XOS contain...

ipxutils, ncpfs security update

CentOS Errata and Security Advisory CESA-2005:371-01 An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the wa...

Moderate: Red Hat Security Advisory: ncpfs security update

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

Moderate: Red Hat Security Advisory: cyrus-imapd security update

Updated cyrus-imapd packages that fix several buffer overflow security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-imapd package contains the core of the Cyrus IMAP server. Several buffer overflow bugs we...

CVE-2005-1628

WebAPP apage.cgi remote command execution (CVE-2005-1628) affects WebAPP versions 0.9.9.2.1 and earlier. The flaw is due to lack of input validation in the f parameter, allowing an attacker to execute arbitrary shell commands on the remote host with the web server’s privileges. Affected component...

CVE-2005-1589

The CVE-2005-1589 issue affects the Linux kernel’s pktcdvd (and raw device) ioctl handler. In kernel 2.6.12-rc4 and earlier, pkt_ioctl in pktcdvd.c calls the wrong function when issuing an ioctl to the block device, which can leak kernel address space to user space. This local-privilege scenario ...

CVE-2005-1631

Booby 1.0.0 (and earlier) is affected by an information-disclosure vulnerability: remote attackers can view private bookmarks by guessing item IDs. The root cause is external access to bookmark items through guessable identifiers, as described in CVE-2005-1631. The connected records repeat the sa...

CVE-2005-1641

Summary: The Ignition Project ignitionServer vulnerable component is the IRC service’s module mod_channel . Affected version range: ignitionServer 0.3.0 to 0.3.6 (and possibly earlier). Root cause: bug in how protected channels locked by a key are enforced and a broader design/validation issue in...

CVE-2005-1634

Multiple cross-site scripting XSS vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 anzahlbeitraege parameter to jgsportal.php, 2 year parameter to jgsportalstatistik.php, 3 year parameter to jgsportalbeitraggraf.php, 4...

CVE-2005-1643

The CVE-2005-1643 entry affects Zoidcom 1.0 beta 4 and earlier . The vulnerability lies in the ZCom_BitStream::Deserialize function, where processing a crafted UDP packet with a large size value can trigger a memory allocation error or an out-of-bounds read, enabling a remote attacker to cause a ...

CVE-2005-1634

The data confirms concrete flaws in JGS-XA/JGS-Portal up to version 3.0.2: multiple XSS and SQL injection vectors enabled via parameters in jgs_portal.php and related scripts (anzahl_beitraege, year in statistik/beitraggraf/themes, tag, id in sponsor) or even the Accept-Language header to jgs_por...

CVE-2005-1635

The provided Connected documents confirm that JGS-XA JGS-Portal

CVE-2005-1589

The pktioctl function in the pktcdvd block device ioctl handler pktcdvd.c in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users...

CVE-2005-1633

The connected OpenVAS entries describe the vulnerability in JGS-Portal (WoltLab Burning Board integration) as SQL injection flaws in JGS-Portal

CVE-2005-1626

The CVE-2005-1626 entry affects Pico Server (pServ) prior to version 3.3, with multiple overflow issues in handlers.c that may allow an attacker to execute arbitrary code. Root cause: buffer overflows in a core request/handler module. Documented impact is arbitrary code execution with network acc...