CVE-2005-1544

CVE-2005-1544 describes a stack-based buffer overflow in libTIFF prior to 3.7.2, triggered while processing a TIFF file with a malformed BitsPerSample tag. This allows remote attackers to execute arbitrary code. The OpenVAS and distro advisories (e.g., Debian DSA-755-1, Ubuntu USN-130-1, Mandrake...

CVE-2005-1580

BoastMachine 3.0 is affected by an arbitrary file upload via users.ini.php due to improper file type restriction, enabling remote code execution. Connected records also indicate a vulnerability class lasting into newer versions; remediation noted in Nessus: upgrade to BoastMachine 3.1 or later to...

CVE-2005-1562

CVE-2005-1562 affects MaxWebPortal 1.3.5 and earlier. The vulnerability is due to multiple SQL injection flaws in ASP components, allowing remote attackers to execute arbitrary SQL commands via specific parameters: fpassword (inc_functions.asp), txtAddress, message, or subject (post_info.asp), an...

Xerox Document Centre Web Server Unspecified Unauthorized Access (XRX05-003)

According to its model number and software version, the remote host is a Xerox Document Centre or WorkCentre device with an embedded web server that could allow unauthorized access to the web server directory structure, which in turn could enable a remote attacker to gain access rights and to mak...

CVE-2005-0758

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script...

CVE-2005-0758

The CVE-2005-0758 issue affects gzip prior to 1.3.5, where zgrep does not properly sanitize file arguments, allowing local users to inject filenames into a sed script and execute arbitrary commands. Connected advisories confirm related issues (CVE-2005-0988 and CVE-2005-1228) in gunzip/bzip2 work...

CVE-2005-0972

CVE-2005-0972 corresponds to an integer overflow in the Mac OS X 10.3.9 and earlier searchfs system call, enabling a local attacker to execute arbitrary code via crafted parameters. The issue affects Mac OS X 10.3.x up to 10.3.9 and is documented across multiple sources (NVD, Red Hat CVE entry, C...

CVE-2005-1579

Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition .qtz file that uses certain patches to read local information, then other patches to send the information to the attacker...

CVE-2005-1531

CVE-2005-1531 affects Mozilla Firefox <= 1.0.3 and Mozilla Suite

CVE-2005-0973

CVE-2005-0973 affects Mac OS X 10.3.9 and earlier. The issue is in the setsockopt system call and allows local users to cause a denial of service via crafted arguments, resulting in memory exhaustion. In the connected documents, the description consistently states a local, memory-exhaustion impac...

CVE-2005-1532

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160...

CVE-2005-0969

CVE-2005-0969 affects Mac OS X prior to 10.3.9: a heap-based buffer overflow in the syscall emulation functionality allows local users to trigger a denial of service (kernel panic) and potentially execute arbitrary code via crafted parameters. Remediation documented in Mac OS X 10.3.9; users shou...

CVE-2005-0974

CVE-2005-0974 concerns Mac OS X 10.3.9 and earlier, where an issue in the nfs_mount call is described as an unknown vulnerability that allows local users to gain privileges via crafted arguments. This is documented across multiple sources (NVD, CVE List) with the same description. The available c...

CVE-2005-0971

The CVE-2005-0971 entry describes a stack-based buffer overflow in the semop system call on Mac OS X 10.3.9 and earlier that enables local privilege escalation via crafted arguments. Impact is local privilege gain; CVSSv2 base score 4.6 (Medium). Affected: Mac OS X 10.3.x before 10.3.9. Root caus...

CVE-2005-1271

...

CVE-2005-1271

CVE-2005-1271 is a reservation duplicate of CVE-2005-1343 and should not be used as an active entry. The concrete vulnerability is CVE-2005-1343: a stack-based buffer overflow in the Mac OS X VPN daemon vpnd (Server_id via -i) allows a local user to execute arbitrary code with root privileges on ...

CVE-2005-1271

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1343. Reason: This candidate is a reservation duplicate of CVE-2005-1343. Notes: All CVE users should reference CVE-2005-1343 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-1531

Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using 1 a javascript: URL in a view-source: URL, 2 a javascript: URL in a...

RHEL 4 : openmotif (RHSA-2005:412)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:412 advisory. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. An integer overflow flaw was found in libXpm, which...

gaim security update

CentOS Errata and Security Advisory CESA-2005:429 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-May/073801.html https://lists.centos.org/pipermail/centos-announce/2005-May/073802.html...