CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...

CVE-2005-1462

The CVE-2005-1462 entry concerns Ethereal (now Wireshark) before version 0.10.11, specifically a double-free vulnerability in the ICEP dissection code that could allow a remote attacker to execute arbitrary code. The issue affects the Ethereal/tethereal dissectors and relates to how the ICEP diss...

CVE-2005-1469

The CVE-2005-1469 entry concerns Ethereal (Wireshark) GSM dissector before version 0.10.11. The vulnerability is described as an unknown issue in the GSM dissector that can cause the dissector to access an invalid pointer, potentially impacting parsing of GSM traffic. Supported details indicate t...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops...

CVE-2005-1466

The CVE-2005-1466 entry refers to a vulnerability in Ethereal’s DICOM dissector that could cause a denial of service via a large memory allocation in versions prior to 0.10.11. Remediation exists in updating to Ethereal 0.10.11, as reflected in Red Hat/CentOS advisories (RHSA-2005:427, CESA-2005:...

CVE-2005-1459

Ethereal (now Wireshark) has multiple remote‑code-execution/denial of service vulnerabilities in its dissectors (WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, SMB PIPE) prior to version 0.10.11. The CVE set CVE-2005-1456 through CVE-2005-1470 is cited for these issues....

CVE-2005-1456

CVE-2005-1456 affects Ethereal before 0.10.11, with multiple vulnerabilities in the DHCP and Telnet dissectors that allow remote denial of service (abort). The initial description notes DoS via malformed packets, while connected documents confirm the issue is addressed in Ethereal 0.10.11 (RHSA-2...

CVE-2005-1467

Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service memory exhaustion via unknown vectors...

CVE-2005-1465

CVE-2005-1465 refers to an unknown vulnerability in Ethereal’s NCP dissector that could allow remote attackers to trigger a denial of service via a long loop. The connected advisories confirm that Ethereal releases prior to 0.10.11 were affected, and updates shipping version 0.10.11 fix the issue...

USN-118-1: PostgreSQL vulnerabilities

It was discovered that unprivileged users were allowed to call internal character conversion functions. However, since these functions were not designed to be safe against malicious choices of argument values, this could potentially be exploited to execute arbitrary code with the privileges of th...

Low: Red Hat Security Advisory: nasm security update

An updated nasm package that fixes multiple security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM...

CVE-2005-1337

Technical details for CVE-2005-1337 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-1340

CVE-2005-1340 concerns the HTTP proxy service in Apple Mac OS X Server Admin (Mac OS X 10.3.9). The description in multiple sources states that the proxy does not restrict access when enabled, allowing remote users to misuse the proxy. Connected documents corroborate that this is a remote-access ...

CVE-2005-1339

lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name...

CVE-2005-1342

The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...

CVE-2005-1343

CVE-2005-1343: Mac OS X vpnd vulnerability. A stack-based buffer overflow in the VPN daemon (vpnd) before 10.3.9 allows a local, authenticated user to execute arbitrary code with root privileges by supplying a long -i Server_id argument. This affects the vpnd component and is triggered when Serve...

CVE-2005-1339

CVE-2005-1339 affects Mac OS X 10.3.9 where lukemftpd allows remote authenticated users to escape the chroot by logging in with their full name. The issue is rooted in lukemftpd’s chroot handling. Impact: enables escape from a restricted root environment (as described in the CVE entry and corrobo...

CVE-2005-1335

The CVE-2005-1335 issue affects Mac OS X 10.3.9 where local users can gain elevated privileges by abusing chpass/chfn/chsh, which invoke external helper programs insecurely. The CERT advisory (VU-331694) states the Directory Services utilities may execute external programs with administrative pri...

CVE-2005-1333

CVE-2005-1333 describes a Directory traversal vulnerability in the Bluetooth OBEX services of Mac OS X 10.3.9, allowing remote attackers to read arbitrary files. The issue affects Bluetooth file/OBEX handling and arises from improper path handling. In practice, exploitation would enable unauthori...