CVE-2005-0524

The vulnerability CVE-2005-0524 affects PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3 via the getimagesize entry point. The php_handle_iff function in image.c can be triggered to loop infinitely by a -8 size value, allowing remote attackers to cause a denial of service. The provided documents name PHP secur...

CVE-2005-0945

CVE-2005-0945 describes a stored/reflected Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1, where remote attackers can inject arbitrary script via onmouseover or onload events in (1) img, (2) link, or (3) mail tags. The NVD entry lists a base score of 4.3 (Medium) with network attack v...

CVE-2005-0957

The CVE-2005-0957 entry concerns BayTech RPC-3 Telnet Daemon (3.05) where an attacker can bypass authentication by sending a specific keystroke sequence at the username prompt. The vulnerability arises from an input sequence that allows access without valid credentials, enabling remote access to ...

CVE-2005-0964

Kerio Personal Firewall 4.1.2 and earlier has a local bypass vulnerability where a malicious process impersonates a legitimate, less-restricted process to bypass firewall rules. This can allow local users to circumvent protections. The CVE entry notes a MEDIUM impact (base score 4.6); no specific...

CVE-2005-0963

CVE-2005-0963 concerns an error in the Toshiba ACPI BIOS 1.6 that causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, preventing boot even when the MBR is not malformed. The description notes that there is debate on whether this constitute...

CVE-2005-0525

The CVE-2005-0525 entry concerns PHP’s image.c: The function php_next_marker, reachable via getimagesize, is invoked by a JPEG image with an invalid marker value. This triggers a denial-of-service via an infinite loop caused by passing a negative length to php_stream_seek, affecting PHP versions ...

Cross-Site Scripting vulnerability

PMASA-2005-3 Announcement-ID: PMASA-2005-3 Date: 2005-04-03 Summary Cross-Site Scripting vulnerability Description We received a security advisory from Oriol Torrent Santiago and we wish to thank him for his work and report. The convcharset parameter was not correctly validated, opening the door ...

Information leak in the Linux kernel ext2 implementation

Description: Information leak in the Linux kernel ext2 implementation References: CAN-2005-0400 Authors: Mathieu Lafon [email protected] Romain Francoise [email protected] Arkoon Security Team Advisory - March 25, 2005 http://arkoon.net/advisories/ext2-make-empty-leak.txt Revision: 1.0 1...

Solaris 9 (sparc) : 119433-01

SunOS 5.9: telnet. Date this patch was last updated by Sun : Mar/28/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid17683;...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2005:065)

A format string vulnerability was discovered in ImageMagick, in the way it handles filenames. An attacker could execute arbitrary code on a victim's machine provided they could trick them into opening a file with a special name CVE-2005-0397. As well, Andrei Nigmatulin discovered a heap-based...

Solaris 9 (sparc) : 117427-08

SunOS 5.9: ufs Patch. Date this patch was last updated by Sun : Jul/15/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

Solaris 9 (x86) : 117476-06

SunOS 5.9x86: ufs Patch. Date this patch was last updated by Sun : Jul/15/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

RHEL 4 : gtk2 (RHSA-2005:344)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:344 advisory. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug was found in the way...

CVE-2005-0891

The CVE-2005-0891 issue is a double-free vulnerability in GTK+-related BMP handling (gdk-pixbuf/gtk2) that can crash applications (DoS). Public disclosures tie the flaw to BMP processing in GTK+ gdk-pixbuf, with Red Hat/CentOS advisories RHSA-2005:343 and RHSA-2005:344 and related Ubuntu/Fedora/N...

CVE-2005-0891

Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...

DSA-703-1 krb5 - buffer overflows

Bulletin has no description...

SUSE-SA:2005:020: ipsec-tools

The remote host is missing the patch for the advisory SUSE-SA:2005:020 ipsec-tools. Racoon is a ISAKMP key management daemon used in IPsec setups. Sebastian Krahmer of the SUSE Security Team audited the daemon and found that it handles certain ISAKMP messages in a slightly wrong way, so that remo...

BakBone NetVault Remote Heap Overflow

This module exploits a heap overflow in the BakBone NetVault Process Manager service. This code is a direct port of the netvault.c code written by nolimit and BuzzDee. Module Options msf use exploit/windows/misc/bakbone/netvaultheap msf undefinednetvaultheap show actions ...actions... msf...

CVE-2005-0386

CVE-2005-0386 is an XSS vulnerability in mailreader's network.cgi before 2.3.29 that allows remote attackers to inject arbitrary script/HTML via MIME types text/enriched or text/richtext. Affected product: mailreader; root cause: missing input sanitising when displaying messages. Impact: remote, ...

Moderate: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix a libXpm integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the basic low-level functionality...