MS05-022: Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)

The remote host is running MSN Messenger. The version of MSN Messenger used on the remote host is vulnerable to a remote buffer overflow in the way it handles GIF files with height and width fields. An attacker may exploit this vulnerability to execute arbitrary code on the remote host. C Tenable...

SUSE-SA:2005:022: kdelibs3

The remote host is missing the patch for the advisory SUSE-SA:2005:022 kdelibs3. Several vulnerabilities have been identified and fixed in the KDE desktop environment. - A buffer overflow via specially crafted PCX pictures was fixed. This could lead to a remote attacker being able to execute code...

MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066) (uncredentialed check)

The remote host runs a version of Windows that has a flaw in its TCP/IP stack. The flaw may allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host or to perform a denial of service attack against the remote host. Proof of concept code is available to perform a denia...

[Full-disclosure] SUSE Security Announcement: various KDE security problems (SUSE-SA:2005:022)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: kdelibs3 Announcement-ID: SUSE-SA:2005:022 Date: Mon, 11 Apr 2005 15:00:00 +0000 Affected products: 9.1, 9.2, 9.3 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Vulnerability Type: remote code execution local denial of...

MS05-016: Vulnerability in Windows Shell (893086)

The remote version of Windows contains a flaw in the Windows Shell that could allow an attacker to elevate his privileges and/or execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to lure a victim into visiting a malicious website or into opening a malicious...

Salim Gasmi GLD (Greylisting Daemon) 1.0 < 1.4 - Postfix Greylisting Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'GLD...

phpBB up.php Arbitrary File Upload

The installed version of phpBB on the remote host includes a file upload script intended as a way for users to upload files that they can then link to in their posts. The script, however, does not require authentication, makes only a limited check of upload file types, and stores uploads in a kno...

CVE-2005-1035

CVE-2005-1035 involves multiple buffer overflows in Pavuk before 0.9.32. Affected software: Pavuk; vulnerable component: the buffer-handling logic mentioned in the description. Root cause: multiple buffer overflows. Attack vectors and impact are not specified in the provided documents; exploitati...

CVE-2005-1039

CVE-2005-1039 describes a race condition in Core Utilities (coreutils) 5.2.1. When running mkdir, mknod, or mkfifo with the -m switch, local users can modify permissions of other files. Connected sources (Red Hat, Ubuntu, Debian, OSV, NVD, etc.) reiterate the same description. The provided docume...

CVE-2005-1037

The CVE entry CVE-2005-1037 concerns an unknown vulnerability in AIX 5.3.0 when configured as an NIS client that could allow remote attackers to gain root privileges. The connected sources do not provide technical details, affected subcomponents, exact root cause, exploitation method, or remediat...

CVE-2005-1040

The CVE-2005-1040 entry concerns Novell Linux Desktop 9, specifically the netapplet component. It describes multiple unknown vulnerabilities that allow local users to gain root privileges, related to user input being passed to network scripts without verification. The connected Red Hat and NVD re...

CVE-2005-1064

The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...

CVE-2005-1027

The vulnerability concerns PHP-Nuke 6.x through 7.6 with multiple stored/reflected XSS vectors in the web interface. Specifically, arbitrary web script/HTML can be injected via the username parameter in the Your_Account module, the avatarcategory parameter in the Your_Account module, or the lid p...

CVE-2005-1033

CVE-2005-1033 (CubeCart

CVE-2005-1031

CVE-2005-1031 affects RunCMS 1.1A and possibly other products based on e-Xoops (exoops). The vulnerability arises when the setting “Allow custom avatar upload” is enabled and the uploaded files are not properly verified, allowing remote attackers to upload arbitrary files. Connected sources corro...

CVE-2005-1021

CVE-2005-1021 concerns a memory leak in Cisco IOS SSH when TACACS+ is used for authentication (IOS 12.0–12.3). The vulnerability can permit remote attackers to cause denial of service via memory exhaustion during login. Related references describe two DoS variants for Cisco IOS SSH with TACACS+ a...

CVE-2005-1024

CVE-2005-1024 affects PHP-Nuke 6.x to 7.6. The issue is an information disclosure via direct requests to my_headlines, userinfo, or search, which causes a PHP error that reveals the path. No explicit root cause or vulnerable version patch is provided in the connected documents, and exploitation d...

CVE-2005-1023

CVE-2005-1023 : XSS vulnerabilities in PHP-Nuke 6.x–7.6 allow remote attackers to inject arbitrary script/HTML via specific parameters in Search, FAQ, and Encyclopedia modules (min, categories, ltr). The note clarifies that the related banner issue is covered by CVE-2005-1000. Connected documents...

CVE-2005-1032

This CVE entry is rejected/not used; it does not represent an active vulnerability.

CVE-2005-1026

The CVE-2005-1026 entry concerns SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods. The flaws allow remote attackers to execute arbitrary SQL commands via (1) the file_id parameter to dlman.php in DLMan Pro and (2) the id parameter to links.php in Linkz Pro (aka LinksLinks Pro). This ...