10536 matches found
Debian DSA-719-1 : prozilla - format string problems
Several format string problems have been discovered in prozilla, a multi-threaded download accelerator, that can be exploited by a malicious server to execute arbitrary code with the rights of the user running prozilla. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Debian DSA-718-2 : ethereal - buffer overflow
This version lists the correct packages in the packages section. A buffer overflow has been detected in the IAPP dissector of Ethereal, a commonly used network traffic analyser. A remote attacker may be able to overflow a buffer using a specially crafted packet. More problems have been discovered...
RHEL 3 : PHP (RHSA-2005:405)
Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...
Moderate: Red Hat Security Advisory: PHP security update
Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...
[SECURITY] [DSA 718-2] New ethereal packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 718-2 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 718-2] New ethereal packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 718-2 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 718-1] New ethereal packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 718-1 [email protected] http://www.debian.org/security/ Martin Schulze April 28th, 2005 http://www.debian.org/security/faq -...
CVE-2005-1348
CVE-2005-1348 corresponds to a buffer overflow in MailEnable’s HTTPMail service. Concrete details: affected products are MailEnable Enterprise (versions 1.04 and earlier) and MailEnable Professional (versions 1.54 and earlier). The overflow occurs via a long HTTP Authorization header, allowing a ...
CVE-2005-1360
The CVE-2005-1360 issue affects GrayCMS 1.1 and concerns a PHP remote file inclusion in error.php. The underlying problem is that the path_prefix parameter can be manipulated to reference a URL on a remote server that contains executable PHP code, enabling remote code execution. The connected doc...
CVE-2005-1354
CVE-2005-1354 concerns a vulnerability in the forum.pl script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The provided documents confirm this as a remote command‑execution flaw and do not specify affected vendor/product versions, mitigation...
CVE-2005-1359
CVE-2005-1359 is a Cross-site scripting (XSS) vulnerability reported in the text.cgi script, allowing remote attackers to inject arbitrary web script or HTML via the argument. The NVD entry lists a CVSSv2 base score of 4.3 (Medium) with impact on integrity (Partial) and no confidentiality/availab...
CVE-2005-1353
The CVE-2005-1353 issue affects the forum.pl script, where remote attackers can cause the system to read arbitrary files by supplying a full pathname as an argument. This is the explicit vulnerability described in the CVE record and corroborated by NVD entries. The available data provide a CVSSv2...
CVE-2005-1270
The CVE-2005-1270 entry concerns Rootkit Hunter before 1.2.3-r1, where the check_update.sh and rkhunter scripts create temporary files with predictable names. This enables local users to overwrite arbitrary files via a symlink attack. The provided documents do not specify affected OS/Vendor versi...
CVE-2005-1352
CVE-2005-1352 describes an XSS vulnerability in the ad.cgi script that allows remote attackers to inject arbitrary web script or HTML via the argument. Evidence comes from NVD/CVE records; the exact affected product, version, and root cause details beyond “ad.cgi script” are not specified in the ...
CVE-2005-1347
UNVERIFIABLE NOTE: this issue describes a problem that can not be independently verified as of 20050421. Adobe Acrobat reader AcroRd32.exe 6.0 and earlier allows remote attackers to cause a denial of service "Invalid-ID-Handle-Error" error and modify memory beginning at a particular address,...
CVE-2005-1361
CVE-2005-1361 describes multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 (ASP) that allow remote attackers to execute arbitrary SQL via the parameters intProdID (in product.asp) or strCatalog_NAME (in productsByCategory.asp). The vulnerability affects the remote web application’s dat...
CVE-2005-1347
Affected software: Adobe Acrobat Reader prior to version 7 (i.e., 6.0 and earlier). Vulnerability description in connected PT-2005-2349 indicates the issue could allow denial of service and memory modification via a crafted PDF, potentially enabling arbitrary code execution, but the vendor report...
CVE-2005-1351
CVE-2005-1351 concerns the ad.cgi script, which allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, no authentication, and partial impacts to confidentiality, in...
CVE-2005-1355
CVE-2005-1355 affects includer.cgi in The Includer and enables remote attackers to read arbitrary files by supplying a full pathname in the argument (a directory traversal issue). The connected record for CVE-2005-0801 confirms the pattern: directory traversal via .. or a full pathname in the URL...