CVE-2005-0767

CVE-2005-0767 is documented in multiple advisories as a race condition in the Radeon DRI driver. The vulnerability affects systems using the Linux kernel with Radeon DRI hardware accelerated graphics, where a local user with DRI privileges could potentially gain root privileges due to a race in t...

CVE-2005-0769

CVE-2005-0769 affects OpenSLP prior to 1.1.5. Multiple buffer overflows in the OpenSLP service when handling malformed SLP packets allow remote attackers to potentially execute code or cause other effects; some sources describe the risk as remote arbitrary-code execution, while NVD notes an unkno...

CVE-2005-0765

CVE-2005-0765 : In Ethereal, unknown issue in the JXTA dissector allowed remote attackers to crash the application (DoS) on versions up to 0.10.9; Red Hat/Mandrake/Gentoo advisories and PT security entries link this family of issues to the 0.10.10 fix. Affected: Ethereal up to 0.10.9; Remediation...

CVE-2005-0209

CVE-2005-0209 is a Linux kernel netfilter fragmentation flaw that allows a remote attacker to crash the system (DoS) by sending crafted IP fragments. Documented impact is a kernel crash via malformed fragments in the netfilter path of Linux 2.6.x (notably 2.6.8.1). Public advisories confirm vulne...

CVE-2005-0210

CVE-2005-0210 is a Netfilter-related vulnerability in Linux kernel 2.6.8.1 where certain fragmented packets reassembled twice cause a data structure to be allocated twice, leading to memory exhaustion and potential denial of service. The connected documents confirm this issue and show that multip...

RHEL 2.1 : sylpheed (RHSA-2005:303)

An updated sylpheed package that fixes a buffer overflow issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Sylpheed is a GTK+ based fast email client. A buffer overflow bug has been found in the way Sylpheed handles...

MailEnable Standard SMTP mailto: Request Format String

The remote host is running a version of MailEnable Standard Edition that suffers from a format string vulnerability in its handling of SMTP commands. Specifically, a remote attacker can crash the SMTP daemon by sending a command with a format specifier as an argument. Due to the nature of the fla...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2005:306)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

HP-UX PHNE_30990 : HP-UX ftpd, Remote Unauthorized Access (HPSBUX01119 SSRT4694 rev.2)

s700800 11.11 ftpd1M and ftp1 patch : A potential vulnerability has been identified with HP-UX running ftpd where the vulnerability could be exploited to allow a remote authorized user unauthorized access to files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patc...

CVE-2005-0385

CVE-2005-0385 refers to a local root-buffer overflow in luxman (SVGA-based PacMan clone) prior to version 0.41, exploitable via a long -f argument and insecure svgalib libraries. Debian/DSA-693-1 fixes the issue in luxman 0.41-17.2 (stable) and 0.41-20 (unstable). The Debian advisories describe t...

CVE-2005-0705

CVE-2005-0705 affects Ethereal 0.10.7–0.10.9 via the GPRS-LLC dissector when the ignore cipher bit option is enabled, allowing remote attackers to cause an application crash (denial of service). Red Hat advisory RHSA-2005:306 recommends upgrading Ethereal to 0.10.10 to remediate the issue.

CVE-2005-0704

CVE-2005-0704 describes a buffer overflow in the Etheric dissector of Ethereal (versions 0.10.7–0.10.9) that can be triggered by processing crafted network packets, leading to a denial of service (application crash) and potentially remote code execution. Multiple vendor advisories (e.g., Red Hat ...

CVE-2005-0083

MySQL MaxDB/Web Agent vulnerability CVE-2005-0083 affects MaxDB 7.5.00 for Windows (and possibly earlier/other platforms). Remote input validation errors in DBMCli_String::ReallocString, DBMCli_String::operator, DBMCli_Buffer::ForceResize, DBMCli_Wizard::InstallDatabase, DBMCli_Devspaces::Complet...

LSH lshd parse_kexinit() Function Malformed Key Exchange Message Remote DoS

The remote host is running Lysator's LSH, a version of Secure Shell SSH that is available for Unix-like platforms. This version of LSH is reportedly vulnerable to a denial of service attack. An attacker can exploit this issue by sending a malformed key exchange message. C Tenable Network Security...

Servers Alive: Local Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory information: Title: Servers Alive - Privilege Escalation CVE Candidate Number: CAN-2005-0352 Application: Servers Alive Versions known affected: 4.1, 5.0; other versions not tested. Classification: Privilege Escalation Author: Michael Starks...

Phorum < 5.0.15 Multiple XSS

The version of Phorum installed on the remote host is prone to multiple cross-site scripting vulnerabilities due to its failure to sanitize user input. An attacker can exploit these flaws to potentially cause arbitrary script and HTML code to be rendered by a user's browser in the context of the...

MDKSA-2005:057 - Updated gnupg packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: gnupg Advisory ID: MDKSA-2005:057 Date: March 15th, 2005 Affected versions: 10.0, 10.1, 9.2, Corporate 3.0, Corporate Server 2.1 Problem Description: The OpenPGP protocol is vulnerable to a...

Multiple KDE Security Advisories &#40;2005-03-16&#41;

Three KDE security advisories have been issued today. KDE Security Advisory: Local DCOP denial of service vulnerability Original Release Date: 20050316 URL: http://www.kde.org/info/security/advisory-20050316-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0396 1. System...

Low: Red Hat Security Advisory: postfix security update

Updated postfix packages that include a security fix and two other bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and...

RHEL 4 : postfix (RHSA-2005:152)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:152 advisory. Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and TLS. A flaw was found in the ipv6 patch used with Postfix. When the file...