RHEL 4 : mailman (RHSA-2005:235)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:235 advisory. Mailman manages electronic mail discussion and e-newsletter lists. A cross-site scripting XSS flaw in the driver script of mailman prior to version...

RHEL 4 : libexif (RHSA-2005:300)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:300 advisory. The libexif package contains the EXIF library. Applications use this library to parse EXIF image files. A bug was found in the way libexif parses EXIF...

CVE-2005-0816

CVE-2005-0816 affects Solaris 7–9, where a buffer overflow in the newgrp utility allows local users to gain root privileges. The description explicitly states the impact is local privilege escalation; no remediation details are provided in the supplied documents. A related EUVD entry mentions mal...

CVE-2005-0786

CVE-2005-0786 is a SQL injection vulnerability in SimpGB where the quote parameter of guestbook.php is unsafely used in queries via gb_new.inc. The issue allows unauthenticated remote attackers to manipulate queries, reading or modifying data and potentially executing commands on the web server. ...

CVE-2005-0815

Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem...

CVE-2005-0805

SQL injection vulnerability in index.php in Subdreamer Light, when magicquotesgpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by...

CVE-2005-0809

CVE-2005-0809 affects NotifyLink server: when client key retrieval is enabled, an unauthenticated HTTP POST to /hwp/get.asp can disclose AES keys. The server uses a fixed byte reordering scheme to obfuscate the key, substantially weakening cryptographic protection and enabling brute-force recover...

CVE-2005-0791

CVE-2005-0791 describes an XSS vulnerability in the adframe.php component of phpAdsNew 2.0.4-pr1. The issue occurs when PHP’s register_globals is enabled, allowing remote attackers to inject arbitrary web script or HTML via the refresh parameter. The vulnerability is confirmed by multiple sources...

CVE-2005-0797

The CVE-2005-0797 entry concerns Novell iChain Mini FTP Server 2.3, where authentication error handling reveals whether a user exists. This information disclosure can facilitate brute-force attempts, since attackers can iterate valid usernames more efficiently. The available sources confirm the a...

CVE-2005-0783

CVE-2005-0783 : Cross-site scripting in Phorum prior to 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file. Affected software is Phorum (before 5.0.14a); the vulnerability is triggered when handling file attachments. The provided documents ...

CVE-2005-0800

CVE-2005-0800 describes a PHP remote file inclusion vulnerability in mcNews 1.3 and earlier. The flaw exists in install.php where the l parameter can be modified to reference a URL on a remote server containing PHP code, allowing an attacker to execute arbitrary PHP. The issue is triggered throug...

CVE-2005-0812

The CVE-2005-0812 issue affects NotifyLink 3.0 where the web interface displays user passwords in cleartext on the administrative page. root cause: passwords are stored and exposed via the admin UI, enabling an attacker with web/admin access or local access to obtain credentials. Impact per sourc...

CVE-2005-0784

CVE-2005-0784 affects Phorum before 5.0.15, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The issue is triggered via the subject line in follow.php or in the user’s personal control panel, stemming from failure to properly...

CVE-2005-0821

Citrix MetaFrame Conferencing Manager 3.0 is cited as vulnerable in CVE-2005-0821, with the issue described as a bypass of organizer restrictions that allows conference members to control the keyboard and mouse. The connected documents confirm the affected product and the general impact but do no...

CVE-2005-0802

CVE-2005-0802 concerns a cross-site scripting (XSS) vulnerability in the search.asp handler of ACS Blog versions 0.8 through 1.1b. The issue allows remote attackers to inject and execute arbitrary web script or HTML via the search parameter, potentially impacting users viewing search results. The...

CVE-2005-0814

CVE-2005-0814 affects Lysator LSH server components (lshd) in LSH 1.x and 2.x up to version 2.0.1. The vulnerability is described as an unknown DoS condition that can be triggered remotely, with vectors not detailed in the provided documents. Connected sources corroborate the affected software an...

CVE-2005-0794

ZPanel 2.0 and 2.5 beta 10 are affected by a vulnerability where installation scripts remain accessible after use. This may allow remote attackers to reinstall the software and potentially cause a denial of service via a direct request to install.php. The issue is described in CVE-2005-0794 and i...

CVE-2005-0805

The CVE-2005-0805 entry describes a SQL injection in Subdreamer Light’s index.php when magic_quotes_gpc is enabled. The vulnerability allows remote attackers to run arbitrary SQL via parameters treated as global variables, demonstrated via the imageid parameter that imagegallery.php fails to sani...

CVE-2005-0644

CVE-2005-0644 describes a buffer overflow in McAfee Scan Engine 4320 when scanning LHA archives. The issue arises from insufficient bounds checking in the LHA archive handling code (Type-2 header file name field), allowing remote code execution with SYSTEM privileges via a malformed LHA file. Aff...

CVE-2005-0800

PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720...