RHEL 4 : postfix (RHSA-2005:152)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:152 advisory. Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and TLS. A flaw was found in the ipv6 patch used with Postfix. When the file...

RHEL 4 : squid (RHSA-2005:201)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:201 advisory. Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles fully qualified domain name FQDN lookups. A malicious DNS server...

"Drop to STARTUP Folder II" published on 2005/02/08

Michael Krax and Andreas Sandblad found "Drop to STARTUP Folder II" which has been patched for several weeks. It's a shame that neither provided code. So here we go: http://umbrella.name/computer/0daymon/ 0daymon also collected the original posts by bug finders for reference...

CVE-2005-0384

Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via a pppd client...

Security fix for the ALT Linux 9 package wireshark version 0.10.10-alt1

March 15, 2005 Sir Raorn 0.10.10-alt1 - 0.10.10 - Fixed: + CAN-2005-0699 + CAN-2005-0704 + CAN-2005-0705 - ethereal-devel and idl2eth are unusable. Dropped - libwiretap is back...

Apache Tomcat AJP12 Protocol Malformed Packet Remote DoS

According to its self-reported version number, the version of Apache Tomcat running on the remote host is affected by a denial of service vulnerability due to a failure to handle malformed input. By submitting a specially crafted AJP12 request, an unauthenticated attacker can cause Tomcat to stop...

CVE-2005-0258

Directory traversal vulnerability in 1 usercpregister.php and 2 usercpavatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete unlink arbitrary files via "/../" sequences in the avatarselect parameter...

CVE-2005-0791

Cross-site scripting XSS vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter...

CVE-2005-0508

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."...

CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

GLSA-200503-15 : X.org: libXpm vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-15 X.org: libXpm vulnerability Chris Gilbert has discovered potentially exploitable buffer overflow cases in libXpm that weren't fixed in previous libXpm versions. Impact : A carefully-crafted XPM file could crash X.org,...

CVE-2005-0736

CVE-2005-0736 entry is rejected/not used and does not represent an active vulnerability.

CVE-2005-0742

Cross-site scripting XSS vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-0730

CVE-2005-0730 involves PY Software’s Active WebCam WebServer (webcam.exe) 5.5. The connected sources describe concrete issues: (1) Denial of Service by requesting a file on the floppy drive (A:\a.txt), (2) path disclosure via error messages revealing installation paths for nonexistent files, and ...

CVE-2005-0742

CVE-2005-0742 describes a cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7. The issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors, potentially affecting the integrity of user data. The cited NVD metrics indicate a low to mediu...

CVE-2005-0737

CVE-2005-0737 describes a buffer overflow in Yahoo! Messenger that allows remote attackers to execute arbitrary code via the offline mode. The vulnerability is associated with Yahoo! Messenger; the underlying cause is a buffer overflow condition, enabling potential arbitrary code execution and im...

CVE-2005-0746

CVE-2005-0746 affects the Mini FTP server component of Novell iChain 2.2 and 2.3 SP2 and earlier, where remote unauthenticated attackers can obtain the full server path by issuing the PWD command. The available connected documents confirm the vulnerability description and affected versions, but d...

CVE-2005-0731

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service CPU consumption via a direct request to Filelist.html...

CVE-2005-0732

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message...

CVE-2005-0745

The CVE-2005-0745 entry concerns UTStarcom iAN-02EX VoIP ATA. A local attacker can bypass ATA access restrictions by dialing *#26845#, which triggers a device reset. This is a local-attack scenario with partial confidentiality/integrity/availability impact per CVSSv2 (AV:L, AC:L, I:P, A:P). No ex...