CVE-2005-1296

include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1270

The 1 checkupdate.sh and 2 rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2005-1300

Technical details (affected product/version, root cause, exploitability) are not publicly provided in the connected documents for CVE-2005-1300. Monitor for updates.

CVE-2005-1280

CVE-2005-1280 affects tcpdump 3.9.1 and earlier, where the rsvp_print function can enter an infinite loop when handling a crafted RSVP packet of length 4, causing a denial of service. The vulnerability is publicly documented across multiple sources (e.g., Red Hat/CentOS advisories RHSA-2005-417 a...

CVE-2005-1274

CVE-2005-1274 affects MySQL MaxDB prior to 7.5.00.26. A stack-based buffer overflow occurs in the WebDAV getIfHeader function, exploitable through an HTTP unlock request with a long If parameter. This can allow remote attackers to execute arbitrary code. The vulnerability is documented across mul...

CVE-2005-1281

CVE-2005-1281 affects Ethereal up to version 0.10.10 and earlier, where a remote attacker can trigger a denial of service (infinite loop) by sending a crafted RSVP packet of length 4. This is documented across multiple sources (NVD entry and vendor advisories) and is characterized with a CVSSv2 b...

CVE-2005-1278

CVE-2005-1278 affects tcpdump up to version 3.9.1, where isis_print invoked by isoclns_print can be triggered by a zero-length GRE packet to cause a denial of service (infinite loop). Connected advisories (Red Hat, CentOS, Gentoo, Ubuntu, OpenVAS/Nessus entries) confirm tcpdump-related fixes and ...

CVE-2005-1301

CVE-2005-1301 affects nProtect Netizen. The issue is that the update module is not verified to come from an authorized site, enabling remote malicious sites to write arbitrary files and potentially trigger abnormal browser behavior. Affected components: update-fetch mechanism in nProtect Netizen;...

CVE-2005-1293

CVE-2005-1293 involves multiple SQL injection vulnerabilities in StorePortal 2.63’s default.asp. The affected component is the web application entry point (default.asp) with six injectable parameters: language, bpic, idcategory, content, keyword, and idproduct. The underlying issue is improper in...

NetTerm NetFTPD USER Buffer Overflow

This module exploits a vulnerability in the NetTerm NetFTPD application. This package is part of the NetTerm package. This module uses the USER command to trigger the overflow. Module Options msf use exploit/windows/ftp/netterm/netftpduser msf undefinednetftpduser show actions ...actions... msf...

MaxDB WebDBM GET Buffer Overflow

This module exploits a stack buffer overflow in the MaxDB WebDBM service. This service is included with many recent versions of the MaxDB and SAPDB products. This particular module is capable of exploiting Windows systems through the use of an SEH frame overwrite. The offset to the SEH frame may...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager,...

Moderate: Red Hat Security Advisory: cvs security update

An updated cvs package that fixes security bugs is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes...

CVE-2005-1247

Affected software: Novell Nsure Audit 1.0.1 (webadmin.exe). Vulnerable component: ASN.1/SSL handling when processing client certificates to an SSL server. Root cause: malformed ASN.1 packets trigger a denial of service (as demonstrated via an OpenSSL ASN.1 parsing vulnerability). No remediation d...

CVE-2005-1246

The CVE-2005-1246 entry describes a format-string vulnerability in the snmppd_log function of snmppd_util.c for snmppd 0.4.5 and earlier. The vulnerability may allow remote attackers to cause a denial of service or execute arbitrary code due to unhandled format specifiers in a syslog call. Affect...

RHEL 4 : openoffice.org (RHSA-2005:375)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:375 advisory. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula...

RHEL 4 : cvs (RHSA-2005:387)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:387 advisory. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes version and author...

CVE-2005-1239

CVE-2005-1239 describes a directory-traversal flaw in Raz‑Lee’s third‑party tool used with the iSeries (AS/400) FTP server. The vulnerability allows remote attackers to access arbitrary files, including those in qsys.lib, by sending crafted "." sequences in a GET request. Publicly available refer...

CVE-2005-1241

CVE-2005-1241 describes a directory traversal in the Powertech third‑party tool used with the iSeries AS/400 FTP server, enabling remote access to arbitrary files (including those in qsys.lib) via ".." in GET requests. The initial and connected records present no explicit patch or version details...

CVE-2005-1233

The CVE-2005-1233 issue concerns an XSS vulnerability in the PHP Labs proFile product’s index.php, exploitable via the (1) dir and (2) file parameters. The root cause is unsanitized input leading to arbitrary script/HTML injection in responses. Impact is remote code/input manipulation potential f...