Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix various bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A buffer overflow bug was found in the way Firefox processes GIF images. It is...

Moderate: Red Hat Security Advisory: ipsec-tools security update

An updated ipsec-tools package that fixes a bug in parsing of ISAKMP headers is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel. The...

CVE-2005-0839

CVE-2005-0839 affects the Linux kernel 2.6 family, where access to the N_MOUSE line discipline for TTYs was not restricted. This allowed a local attacker to inject mouse movements or keystrokes into other user sessions, potentially enabling privilege escalation. The issue is fixed in later kernel...

CVE-2005-0881

Cross-site scripting XSS vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter...

DEBIAN-CVE-2005-0759

ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...

CVE-2005-0389

...

CVE-2005-0840

...

CVE-2005-0389

CVE-2005-0389 is a duplicate of CVE-2005-0814. The connected sources (NVD/OSV/OpenVAS) describe an unknown vulnerability in Lysator LSH’s lshd for Lysator LSH 1.x and 2.x up to 2.0.1 that can allow remote denial of service. The publicly available detail for CVE-2005-0814 confirms the affected com...

CVE-2005-0840

CVE-2005-0706 describes a buffer overflow in the GNOME VFS (gnome-vfs/gnome-vfs2) CDDB handling code. When processing CDDB server responses, an attacker could trigger a crash or potentially execute arbitrary code on the victim’s machine. Multiple Nessus/OS advisories reference this CVE and list u...

CVE-2005-0839

Linux kernel 2.6 before 2.6.11 does not restrict access to the NMOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions...

CVE-2005-0824

The vulnerability CVE-2005-0824 affects Mathopd’s internal_dump function. In Mathopd versions 1.5p0–1.5p4 (and 1.6x before 1.6b6 BETA), when running with -n, a local attacker can exploit a symlink attack on dump files triggered by a SIGWINCH signal to overwrite arbitrary files. This is due to imp...

Mandrake Linux Security Advisory : MySQL (MDKSA-2005:060)

A number of vulnerabilities were discovered by Stefano Di Paola in the MySQL server : If an authenticated user had INSERT privileges on the 'mysql' database, the CREATE FUNCTION command allowed that user to use libc functions to execute arbitrary code with the privileges of the user running the...

Interspire ArticleLive 2005 - NewComment Cross-Site Scripting

Interspire ArticleLive 2005 - NewComment Cross-Site Scripting source: https://www.securityfocus.com/bid/12879/info Interspire ArticleLive 2005 is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

Mozilla Browser < 1.7.6 Multiple Vulnerabilities

The remote version of Mozilla contains multiple security issues that could allow an attacker to impersonate a website and to trick a user into accepting and executing arbitrary files or to cause a heap overflow in the FireFox process and execute arbitrary code on the remote host. C Tenable Networ...

[SECURITY] [DSA 696-1] New perl packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 696-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2005 http://www.debian.org/security/faq -...

CVE-2005-0830

CVE-2005-0830 - Xzabite DYNDNSUpdate : Multiple buffer overflows in DYNDNSUpdate before or at 0.6.15, including the ipcheck function in dyndnsupdate.c, allow remote attackers (spoofed dyndns.org server) to execute arbitrary code. Affected product is Xzabite/dyndnsupdate; exact vulnerable versions...

CVE-2005-0831

The vulnerability CVE-2005-0831 affects PHP-Post and allows remote attackers to spoof other users’ names by registering with a username containing hex-encoded characters. The description is confirmed across multiple sources (NVD, Red Hat CVE entry, CVE List) and indicates weak input handling enab...

CVE-2005-0835

CVE-2005-0835 affects the Belkin 54G (F5D7130) wireless router. The SNMP service can be exploited remotely to cause a denial of service via unknown vectors. This mode indicates a network-facing impact with partial loss of availability; no exploitation details or specific remediation are provided ...

CVE-2005-0829

The CVE-2005-0829 entry concerns a Cross-site scripting (XSS) vulnerability in the Digitanium addon to PHP-Fusion 5.01, specifically in setuser.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the user_name or user_pass parameters. Based on the provided do...

CVE-2005-0832

CVE-2005-0832 is an XSS vulnerability in PHP-Post prior to 0.33. The issue allows remote attackers to inject arbitrary script or HTML via unknown vectors. Affected software is PHP-Post versions before 0.33; remediation is to update to 0.33 or later. No exploitation details are provided in the con...