CVE-2005-1399

CVE-2005-1399 affects FreeBSD 4.6–4.11 and 5.x–5.4, where insecure default permissions on the /dev/iir device allow unprivileged local users to issue restricted ioctl calls to access or modify data on hardware managed by the iir driver. This results in partial impacts to confidentiality, integrit...

CVE-2005-1406

The CVE-2005-1406 entry concerns the FreeBSD kernel: versions 4.x up to 4.11 and 5.x up to 5.4 may fail to clear certain fixed-length buffers when copying variable-length data, allowing a local attacker to read previously used memory (partial confidentiality impact). The NVD entry shows a Medium ...

CVE-2005-1471

The CVE-2005-1471 issue is a heap overflow in RSA Authentication Agent for Web for IIS (RSA SecurID Web Agent) when processing chunked transfer-encoding data. This vulnerability could allow a remote attacker to execute arbitrary code on the server, typically with LocalSystem privileges on the IIS...

Gossamer Threads Links SQL login XSS Vulnerability

Gossamer Threads Links SQL login XSS Vulnerability Class Input Validation XSS Remote Local Published / Updated Yes Yes 04th May 2005 Vulnerable Vulnerable: Gossamer Threads Links SQL v3.0 + Links SQL 2.x + Links SQL 2.2.x + Links SQL 3.0 Not Vulnerable - Discussion Links SQL is a perl/modperl/PHP...

Authentication bypass, sql injections and xss in ArticleLive 2005

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah SPECIAL OFFER Hire my auditing services, if I dont fin...

FreeBSD-SA-05:07.ldt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:07.ldt Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure in i386getldt Category: core Module: sysi386 Announced: 2005-05-06 Credits:...

CVE-2005-1453

Leafnode's CVE-2005-1453 affects fetchnews in versions 1.9.48 to 1.11.1. A remote NNTP server closing the connection while fetchnews is reading either an article header or article body can cause fetchnews to crash, which in turn prevents fetching from other servers in the configured list. This is...

CVE-2005-1470

The connected advisories RHSA-2005:427 and CESA-2005:427 document a set of Ethereal vulnerabilities (CVE-2005-1456 through CVE-2005-1470) across multiple dissectors. They mandate upgrading Ethereal to version 0.10.11 to mitigate the issues. Related OpenVAS/Nessus entries reference these advisorie...

CVE-2005-1460

CVE-2005-1460 affects Ethereal (and tethereal) prior to 0.10.11. Descriptions in connected sources indicate multiple unknown dissectors can be exploited remotely to trigger an assertion error, causing a denial of service. Public details consistently cite upgrade to version 0.10.11 as the remediat...

CVE-2005-1468

CVE-2005-1468 affects Ethereal (before 0.10.11) where multiple dissectors (including WSP, Q.931, H.245, KINK, MGCP, RPC, SMBMailslot, SMB NETLOGON, and others) may crash the analyzer via crafted network traffic, causing a denial of service due to a null dereference. Multiple advisories (RHSA-2005...

CVE-2005-1462

Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code...

CVE-2005-1458

CVE-2005-1458 affects Ethereal (wireshark) KINK dissector in versions before 0.10.11; the initial description notes unknown impact/attack vectors. Red Hat/CentOS advisories confirm a fixed release: upgrade to Ethereal 0.10.11 to mitigate these issues. The exact exploitation details beyond the fix...

CVE-2005-1467

CVE-2005-1467 concerns an unknown vulnerability in the NDPS dissector of Ethereal before 0.10.11 that could allow a remote attacker to cause a denial of service by exhausting memory via unknown vectors. The echoing connected sources corroborate that Ethereal (tethereal) before 0.10.11 is affected...

CVE-2005-1461

The CVE‑2005‑1461 case concerns Ethereal (predecessor to Wireshark) with multiple buffer‑overflow flaws across dissectors (SIP, X.509, and others) that allow remote attackers to crash Ethereal and potentially execute arbitrary code. Red Hat/CentOS advisories (RHSA-2005:427, CESA-2005:427) and rel...

CVE-2005-1463

CVE-2005-1463 refers to multiple format-string vulnerabilities in Ethereal before 0.10.11, affecting the DHCP and ANSI A dissectors. The root cause is format-string handling that allows remote attackers to execute arbitrary code. The advisory notes that upgrading Ethereal to version 0.10.11 elimi...

CVE-2005-0918

The issue concerns the NPSVG3.dll ActiveX control used by Adobe SVG Viewer (versions 3.02 and earlier) on Internet Explorer. The vulnerability allows remote attackers to infer the existence of arbitrary files by setting the control’s src property to a target filename and observing whether the pag...

CVE-2005-1458

Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors...

CVE-2005-1464

CVE-2005-1464 is listed among multiple vulnerabilities in Ethereal up to version 0.10.11 that allow a remote attacker to cause a denial of service (infinite loop). The connected advisories confirm Ethereal upgrades to version 0.10.11 as a remediation. The exact root cause per-CVE isn’t detailed i...

CVE-2005-1457

CVE-2005-1457 involves multiple vulnerabilities in Ethereal prior to version 0.10.11, specifically in the dissectors for AIM, LDAP, FibreChannel, GSM_MAP, SRVLOC, and NTLMSSP. The issues allow remote attackers to cause a denial of service (crash). The typical impact is a network-remote crash, wit...

CVE-2005-1469

The CVE-2005-1469 entry concerns Ethereal (Wireshark) GSM dissector before version 0.10.11. The vulnerability is described as an unknown issue in the GSM dissector that can cause the dissector to access an invalid pointer, potentially impacting parsing of GSM traffic. Supported details indicate t...