CVE-2005-1200

AZ Bulletin Board (AZBB) < 1.0.07d is affected by a PHP remote file inclusion in main_index.php (AZBB 1.0.07a–c) via dir_src or abs_layer parameters, enabling arbitrary PHP code execution on a remote server. The official CVE entry (CVE-2005-1200) documents RSF/URL-based code inclusion in AZBB....

CVE-2005-1204

Desktop Rover 3.0 (and possibly earlier versions) is affected by a vulnerability that allows remote attackers to cause a denial of service (application crash) by sending a crafted packet to TCP port 61427, triggering an invalid memory access. The available sources confirm the affected product and...

CVE-2005-1196

CVE-2005-1196: SQL injection in phpBB Knowledge Base module kb.php via the cat parameter due to improper input sanitization. This allows remote attackers to modify SQL queries and potentially access sensitive data. Affected component is the Knowledge Base module for phpBB; the vulnerability is do...

CVE-2005-1195

Multiple heap-based buffer overflows in the code used to handle 1 MMS over TCP MMST streams or 2 RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code...

RHEL 4 : RealPlayer (RHSA-2005:363)

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides solid media playback locally and via streaming. It plays RealAudio,...

SUSE-SA:2005:027: postgresql

The remote host is missing the patch for the advisory SUSE-SA:2005:027 postgresql. Several problems were identified and fixed in the PostgreSQL database server. Multiple buffer overflows in the low level parsing routines may allow attackers to execute arbitrary code via: 1 a large number of...

RHEL 4 : HelixPlayer (RHSA-2005:392)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:392 advisory. HelixPlayer is a media player. A buffer overflow bug was found in the way HelixPlayer processes RAM files. An attacker could create a specially crafte...

RHEL 3 : RealPlayer (RHSA-2005:394)

An updated RealPlayer package that fixes a buffer overflow issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player providing solid media playback locally and via streaming. It plays RealAudio,...

Sun Java System Web Proxy Server Unspecified Remote Overflow

The remote host is running the SunOne Web Proxy. This version is reported vulnerable to a number of remote buffer overflows. Alledgedly, successful exploitation would result in the attacker executing arbitrary commands on the remote SunOne Web Proxy server. C Tenable Network Security, Inc. includ...

logwatch security update

CentOS Errata and Security Advisory CESA-2005:364-01 An updated logwatch package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. LogWatch is a customizable log analysis system. LogWatch...

Mac OS X Security Update 2005-004

The remote host is missing Security Update 2005-004. This security update contains security fixes for the following application : - iSync local privilege escalation TRUSTED...

[SECURITY] [DSA 661-2] New f2c packages fix insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 661-2 [email protected] http://www.debian.org/security/ Martin Schulze April 20th, 2005 http://www.debian.org/security/faq -...

Low: Red Hat Security Advisory: xloadimage security update

A new xloadimage package that fixes bugs in handling malformed tiff and pbm/pnm/ppm images, and in handling metacharacters in filenames is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The xloadimage utility displays images in an X...

Moderate: Red Hat Security Advisory: logwatch security update

An updated logwatch package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for a given period of...

[SECURITY] [DSA 712-1] New geneweb packages fix insecure file operations

-------------------------------------------------------------------------- Debian Security Advisory DSA 712-1 [email protected] http://www.debian.org/security/ Martin Schulze April 19th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 712-1] New geneweb packages fix insecure file operations

-------------------------------------------------------------------------- Debian Security Advisory DSA 712-1 [email protected] http://www.debian.org/security/ Martin Schulze April 19th, 2005 http://www.debian.org/security/faq -...

CVE-2005-1179

CVE-2005-1179 concerns Xerox MicroServer Web Server in various WorkCentre models (e.g., M35/M45/M55 with 2.028.11.000–2.97.20.032 and 4.84.16.000–4.97.20.032; Pro 35/45/55 and Pro 65/75/90 ranges listed in the description) where an SNMP authentication issue could allow remote modification of syst...

CVE-2005-1182

CVE-2005-1182 concerns an unknown vulnerability in IBM OS/400 (R510, R520, R530) Incoming Remote Command (iSeries Access for Windows Remote Command service) that allows denial of service via certain inputs. Public sources (NVD/NIST) describe a non-authenticated, network-facing impact with partial...

CVE-2005-1185

CVE-2005-1185 describes an unquoted Windows search path vulnerability in MusicMatch Jukebox versions up to 10.00.2047. Local users can gain privileges by placing a malicious C:\program.exe that is executed by MMFWLaunch.exe when it runs launch.exe. Affected software/function: MusicMatch Jukebox (...

CVE-2005-1190

CVE-2005-1190 affects WebcamXP PRO prior to or including v2.16.468, where a remote attacker can trigger a denial of service by supplying a very long chat name. This causes excessive display space usage and prevents the chat frame from rendering correctly. The description consistently indicates a ...