CVE-2005-1333

Directory traversal vulnerability in the Bluetooth file and object exchange OBEX services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files...

CVE-2005-1332

CVE-2005-1332 pertains to Mac OS X 10.3.9, where Bluetooth is enabled by default and the Bluetooth file exchange service may be active without user notification. This allows remote attackers to access files and local users to access files via the default transfer directory. Apple addressed the is...

CVE-2005-1336

CVE-2005-1336 is a local buffer overflow vulnerability in the Mac OS X Foundation Framework (v10.3.9) caused by improper handling of environment variables. The vulnerability allows local users to potentially execute arbitrary code with elevated privileges due to a faulty environment-variable proc...

CVE-2005-1330

CVE-2005-1330 affects Apple Mac OS X 10.3.9 AppKit: processing malformed TIFF images can cause NXSeek to offset incorrectly, leading to an unhandled exception and a denial-of-service (Cocoa application crash). The CERT/NVD entries describe the impact as an unauthenticated remote-triggered DoS via...

CVE-2005-1338

CVE-2005-1338 affects Mac OS X 10.3.9. When using an LDAP server that does not implement ldap_extended_operation, initial LDAP passwords for new accounts may be stored in plaintext. The Red Hat security entry confirms the same description. The available documents do not specify affected subcompon...

CVE-2005-0594

The CVE-2005-0594 issue is a local buffer overflow in Apple Mac OS X Server’s NeST (NetInfo Setup Tool) triggered by an overly long -target command-line argument. The flaw allows a local user to execute arbitrary code with the NeST process’s privileges (typically root). Apple addressed this with ...

CVE-2005-1342

CVE-2005-1342 affects Apple Terminal on Mac OS X 10.3.9 where the x-man-page URI handler fails to sanitize terminal escape sequences, enabling remote command execution. The underlying issue is lack of input sanitization for x-man-page URIs, which could lead to arbitrary commands executed in the T...

CVE-2005-1341

Apple Terminal 1.4.4 is affected by CVE-2005-1341, with the issue allowing execution of arbitrary commands via terminal escape sequences. The vulnerability concerns Terminal and related escape handling in macOS components; the initial description explicitly names Terminal 1.4.4 as vulnerable to c...

CVE-2005-1331

CVE-2005-1331 concerns the AppleScript Editor in Mac OS X 10.3.9, where AppleScript: URI handling fails to display the intended code, potentially allowing a remote attacker to persuade the user to run malicious code via URI characters like NULL or control characters. The connected sources corrobo...

CVE-2005-1337

Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI...

[Full-disclosure] iDEFENSE Security Advisory 05.03.05: Mac OS X Server NeST -target Buffer Overflow Vulnerability

Mac OS X Server NeST -target Buffer Overflow Vulnerability iDEFENSE Security Advisory 05.03.05: http://www.idefense.com/application/poi/display?id=239&type=vulnerabilit ies May 03, 2005 I. BACKGROUND Mac OS X is an advanced operating system which blends features of UNIX with the ease-of-use of th...

Interspire articlelive 2005 - Multiple Vulnerabilities

Interspire articlelive 2005 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/13493/info Interspire ArticleLive is reportedly prone to multiple vulnerabilities. These issues may allow a remote attacker to gain administrative access to the application and carry out various...

RHEL 4 : evolution (RHSA-2005:397)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:397 advisory. Evolution is a GNOME-based collection of personal information management PIM tools. A bug was found in the way Evolution displays mail...

RHEL 4 : PHP (RHSA-2005:406)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:406 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP processes IFF and JP...

RHEL 4 : nasm (RHSA-2005:381)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:381 advisory. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM file in such a way...

[Full-disclosure] Local root vuln in VPN daemon on MacOS X

Local root vulnerability in vpnd on MacOS X = 10.3.9 ----------------------------------------------------- Overview -------- There exists a local root exploitable stack based buffer overflow in the VPN daemon shipping with MacOS X. This bug can be easily exploited to gain root access. This...

Interspire articlelive 2005 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/13493/info Interspire ArticleLive is reportedly prone to multiple vulnerabilities. These issues may allow a remote attacker to gain administrative access to the application and carry out various cross-site scripting attacks. Interspire ArticleLive 2005 is...

Debian DSA-720-1 : smartlist - wrong input processing

Jeroen van Wolffelaar noticed that the confirm add-on of SmartList, the listmanager used on lists.debian.org, which is used on that host as well, could be tricked to subscribe arbitrary addresses to the lists. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription

-------------------------------------------------------------------------- Debian Security Advisory DSA 720-1 [email protected] http://www.debian.org/security/ Martin Schulze May 3rd, 2005 http://www.debian.org/security/faq -...

CVE-2005-1417

MaxWebPortal 2.x, 1.35 and related versions are affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to inject arbitrary SQL via numerous ASP scripts (article_popular.asp, dl_popular.asp, links_popular.asp, pic_popular.asp, article_rate.asp, dl_rate.asp, links_rate...