CVE-2005-0834

The CVE-2005-0834 issue affects Belkin 54G (F5D7130) wireless router: SNMP is enabled by default, enabling remote attackers to obtain sensitive information. The NVD entry indicates a NETWORK vector with LOW complexity, no authentication, and PARTIAL confidentiality impact. No explicit remediation...

CVE-2005-0826

CVE-2005-0826 affects OllyDbg 1.10 and earlier. The issue arises when loading a dynamic link library (DLL) with a long filename, leading to a ** denial of service (application crash)**. The available documents do not specify the exact vulnerable file, vector beyond the DLL filename length, or a c...

CVE-2005-0836

Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.206 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file...

CVE-2005-0832

Cross-site scripting XSS vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-0825

CVE-2005-0825 affects LTris prior to 1.0.10. A buffer overflow triggered by a crafted highscores file allows local users to run arbitrary code. The description and connected sources state the vulnerability is local-rights elevation with a potential to execute code on the affected host, but no exp...

CVE-2005-0827

The CVE affects RUNCMS 1.1A, Ciamos 0.9.2 RC1, and e-Xoops 1.05 Rev3, via the Viewcat.php code path where convertorderbytrans is invoked. The underlying issue is that an invalid parameter to convertorderbytrans causes a PHP error message that reveals the filesystem path, enabling remote attackers...

CVE-2005-0837

IceCast 2.20 is affected: remote attackers can bypass the XSL parser and obtain the source of XSL files by requesting a .xsl file with a trailing dot. The provided documents identify the affected product and the exact bypass method, but do not include any remediation details or patch versions.

CVE-2005-0713

The CVE-2005-0713 issue affects Apple Mac OS X up to and including 10.3.7, where the Bluetooth Setup Assistant can be launched without a keyboard or Bluetooth device, allowing local users to bypass access restrictions and gain privileges. The underlying risk is local privilege escalation via an i...

CVE-2005-0828

The CVE-2005-0828 entry affects RunCMS 1.1A, Ciamos 0.9.2 RC1, and e-Xoops 1.05 Rev3 via highlight.php, where the file parameter can disclose arbitrary PHP files (e.g., mainfile.php). This information disclosure has a CVSSv2 base score of 5.0 (PARTIAL confidentiality). Remediation guidance in con...

CVE-2005-0715

CVE-2005-0715 affects Apple Mac OS X AFP Server prior to 10.3.8; insecure permissions on "Drop Boxes" allow local users to read their contents. No exploit details are provided in the connected documents. Remediation guidance in the sources references a security update (Mac OS X Security Update 20...

CVE-2005-0716

CVE-2005-0716 affects Mac OS X 10.3.5/10.3.6 (and possibly earlier) where a stack-based buffer overflow in the Core Foundation Library is triggered by a long CF_CHARSET_PATH environment variable. This local vulnerability could allow an attacker to execute arbitrary code on the affected system; iD...

CVE-2005-0836

CVE-2005-0836 describes an argument injection in Sun Java Web Start/J2SE (Java Web Start for J2SE 1.4.2 up to 1.4.2_06) where the value parameter in a JNLP file’s property tag can be exploited to grant privileges to untrusted applications. This can bypass Java security restrictions and may lead t...

CVE-2005-0712

CVE-2005-0712 affects Apple Mac OS X before 10.3.8, where world-writable permissions on certain directories could allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles. The issue is documented across multiple sources (NVD/NVD clone, Red Hat CVE entry, and Seeb...

CVE-2005-0838

CVE-2005-0838 affects IceCast 2.20’s XSL parser. Multiple buffer overflows in handling long values in xsl:when, xsl:if, or xsl:value-of may lead to denial of service and possibly arbitrary code execution. The description specifies the vulnerable components but does not provide patched versions or...

CVE-2005-0764

The CVE-2005-0764 entry concerns rxvt-unicode with a buffer overflow in command.C prior to version 5.3. An attacker can cause remote code execution by supplying a crafted file containing long escape sequences. The base vulnerability is a memory overflow in handling the crafted input, enabling pot...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 694-1] New xloadimage packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 694-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

Mac OS X Multiple Vulnerabilities (Security Update 2005-003)

The remote host is missing Security Update 2005-003. This security update contains security fixes for the following applications : - AFP Server - Bluetooth Setup Assistant - Core Foundation - Cyrus IMAP - Cyrus SASL - Folder Permissions - Mailman - Safari These programs have multiple...

DSA-694-1 xloadimage - missing input sanitising, integer overflow

Bulletin has no description...

GLSA-200503-23 : rxvt-unicode: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200503-23 rxvt-unicode: Buffer overflow Rob Holland of the Gentoo Linux Security Audit Team discovered that rxvt-unicode fails to properly check input length. Impact : Successful exploitation would allow an attacker to execute...