CVE-2005-0881

Interspire ArticleLive 2005 (PHP) contains a cross-site scripting (XSS) vulnerability in the articles.newcomment function, exploitable via the Articleld parameter to inject arbitrary script/HTML. The CVE-2005-0881 entry corresponds to this issue. Public details describe the vulnerability but do n...

CVE-2005-0887

The CVE-2005-0887 issue affects Double Choco Latte prior to 0.9.4.3. Root cause: eval() executed with user-supplied input via the menuAction variable in functions.inc.php or main.php, enabling remote arbitrary PHP code execution. Impact: partial confidentiality, integrity, and availability depend...

Multiple Products Malformed GIF Image File Handling Buffer Overflow (CVE-2005-0243; CVE-2005-0399; CVE-2007-1071)

...

SUSE-SA:2005:019: mysql

The remote host is missing the patch for the advisory SUSE-SA:2005:019 mysql. MySQL is an Open Source database server, commonly used together with web services provided by PHP scripts or similar. This security update fixes a broken mysqlhotcopy script as well as several security related bugs: -...

RHEL 2.1 / 3 : ImageMagick (RHSA-2005:070)

Updated ImageMagick packages that fix a heap based buffer overflow are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the X Window System. Andrei Nigmatulin discovered a...

RHEL 4 : firefox (RHSA-2005:336)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:336 advisory. Mozilla Firefox is an open source Web browser. A buffer overflow bug was found in the way Firefox processes GIF images. It is possible for an...

RHEL 4 : mozilla (RHSA-2005:335)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:335 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A buffer overflow bug was found...

RHEL 4 : kdelibs (RHSA-2005:325)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:325 advisory. The kdelibs package provides libraries for the K Desktop Environment. The International Domain Name IDN support in the Konqueror browser...

RHEL 4 : ipsec-tools (RHSA-2005:232)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:232 advisory. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel. The ipsec-tools package includes: - setkey, a program...

RHEL 4 : ImageMagick (RHSA-2005:320)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:320 advisory. ImageMagickTM is an image display and manipulation tool for the X Window System which can read and write multiple image formats. A format string bug w...

CVE-2005-0859

CzarNews is affected by a PHP remote file inclusion vulnerability in versions 1.12–1.14 (via tpath to cn_config.php). The CVE-2006-3685 entry explicitly states that an attacker can supply a URL to cn_config.php to execute arbitrary PHP code. The CVE-2005-0859 entry describes a related vector for ...

CVE-2005-0859

PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the tpath parameter to 1 headlines.php or 2 news.php. NOTE: some sources have reported the "dir" parameter as being affected; however, this is likely a cut-and-paste error from the...

CVE-2005-0848

CVE-2005-0848 affects multiple FUN Labs games (4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, US Most Wanted). The issue: remote attackers can cause a denial of service by sending an empty UDP packet to the game server; the serve...

CVE-2005-0844

CVE-2005-0844 affects Nortel VPN client 5.01, where the cleartext password is stored in the memory of the Extranet.exe process, allowing a local user to access sensitive information. The root cause is insecure in‑memory handling of credentials in Extranet.exe, with a local attack vector and parti...

CVE-2005-0842

CVE-2005-0842 involves a cross-site scripting (XSS) vulnerability in Kayako eSupport version 2.3. The flaw occurs in index.php via the parameters _i and _c, allowing remote attackers to inject arbitrary web script or HTML in a victim’s browser. The public description does not specify a fix or aff...

CVE-2005-0854

The CVE-2005-0854 entry concerns betaparticle blog (bp blog) prior to version 4. It reports an authentication bypass that enables remote attackers to perform file operations via direct requests to upload.asp or myFiles.asp (upload and delete respectively). The vulnerability allows unauthorized ac...

CVE-2005-0861

CVE-2005-0861 affects DeleGate prior to 8.11.1. The issue is multiple buffer overflows in DeleGate likely caused by unsafe string handling (e.g., scanning/copying long strings), enabling either a denial of service or arbitrary code execution under the privileges of the running user. Several conne...

CVE-2005-0862

CVE-2005-0862 describes multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier. An attacker can cause arbitrary PHP code execution by manipulating the phpbb_root_path, poc_root_path, or sourcedir parameters to various scripts (poc_loginform.php, phpbb/poc.php, phpnuke...

CVE-2005-0841

CVE-2005-0841 describes an SQL injection in phpMyFamily 1.4.0 affecting multiple PHP files (people.php, track.php, edit.php, document.php, census.php, passthru.php, and possibly others). The root cause is unsanitized input that allows remote attackers to execute arbitrary SQL commands, demonstrat...

CVE-2005-0845

CVE-2005-0845 concerns SurgeMail 2.2g3, where a directory traversal in the Webmail interface, via the attach_id parameter, permits remote authenticated users to write arbitrary files or directories. The underlying issue is improper validation of the dot-dot (.. ) path segment, enabling access out...