CVE-2005-1323

Summary: CVE-2005-1323 is a remote buffer overflow in NetFtpd/NetFTPD used by NetTerm, triggered by a long USER command. Affected versions are NetTerm NetFTPD 5.1.1 and earlier. The overflow can allow arbitrary code execution on the FTP server running NetTerm NetFTPD. Public references in NVD, CV...

CVE-2005-0419

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command...

CVE-2005-1313

CVE-2005-1313 describes a cross-site scripting (XSS) vulnerability in the Horde Passwd module prior to 2.2.2. The issue allows remote attackers to inject arbitrary web script or HTML via the parent frame page title. Affected component: Horde Passwd module. Root cause: insufficient input validatio...

CVE-2005-1318

The CVE-2005-1318 entry concerns Horde Forwards E-Mail Forwarding Manager prior to 2.2.2, which is vulnerable to cross-site scripting (XSS) via the parent frame page title. The affected component is the Forwarding Manager’s web interface; the root cause is improper handling of the frame title lea...

CVE-2005-1316

The CVE-2005-1316 entry documents a cross-site scripting (XSS) vulnerability in the Horde Accounts module for Horde, present before version 2.1.2. The issue allows remote attackers to inject arbitrary script or HTML via the parent’s frame page title. Affected software: Horde Accounts module prior...

CVE-2005-1315

CVE-2005-1315 describes a cross-site scripting (XSS) vulnerability in the Horde Turba module prior to 1.2.5. The flaw allows a remote attacker to inject arbitrary web script or HTML by crafting the parent’s frame page title. The vulnerability is associated with Horde Turba’s handling of the paren...

CVE-2005-0159

The tpkg- scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-1326

CVE-2005-1326 describes a buffer overflow in the VooDoo cIRCle BOTNET prior to version 1.0.33, enabling remote authenticated attackers to cause a denial of service (client crash) through a crafted packet. The vulnerability is documented across multiple sources (NVD, CVE/Vuln lists) with a base sc...

CVE-2005-1317

CVE-2005-1317 affects the Horde Chora module prior to version 1.2.3, enabling a remote attacker to execute arbitrary script/HTML via the parent frame page title (XSS). The vulnerability is due to insufficient input sanitization in the frame title handling. No exploitation details or concrete reme...

CVE-2005-1322

CVE-2005-1322 affects the Horde Nag Task List Manager prior to 1.1.3, where a cross-site scripting (XSS) flaw allows remote attackers to inject arbitrary script or HTML via the parent frame page title. The vulnerability arises in the Nag web interface’s handling of the parent frame title, enablin...

CVE-2005-1328

OneWorldStore is affected by CVE-2005-1328. The vulnerability is a denial-of-service condition caused by remote requests to the owConnections/chksettings.asp endpoint, which can crash the application. The available connected data confirms the vulnerable component and the impact but provides limit...

CVE-2005-1312

Affected software: Yappa-NG before 2.3.2. Vulnerabilities: PHP remote file inclusion (CVE-2005-1312) that could allow arbitrary PHP code execution via unknown vectors; and multiple include/XSS flaws due to failure to sanitize user input, as described in connected Nessus details. Exploitation deta...

CVE-2005-0085

Cross-site scripting XSS vulnerability in ht://dig htdig before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message...

MySQL MaxDB Webtool <= 7.5.00.23 Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================== MySQL MaxDB Webtool 0 -- connecting to 192.168.2.103:9999...done! -- sending packet 16383 bytes ...done! -- sleeping 5 seconds before connecting to 192.168.2.103:4444... --...

iDEFENSE Security Advisory 04.25.05: MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability

MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability iDEFENSE Security Advisory 04.25.05 www.idefense.com/application/poi/display?id=235&type=vulnerabilities April 25, 2005 I. BACKGROUND MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's open source database...

RHEL 4 : sharutils (RHSA-2005:377)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:377 advisory. The sharutils package contains a set of tools for encoding and decoding packages of files in binary or text format. A stack based overflow bu...

Debian DSA-714-1 : kdelibs - several vulnerabilities

KDE security team discovered several vulnerabilities in the PCX and other image file format readers in the KDE core libraries, some of them exploitable to execute arbitrary code. To a small extent the packages in woody are affected as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

RHEL 4 : Mozilla (RHSA-2005:386)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:386 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Vladimir V. Perepelitsa...

openoffice.org security update

CentOS Errata and Security Advisory CESA-2005:375 Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a wo...

mozilla security update

CentOS Errata and Security Advisory CESA-2005:386 Updated mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup...