CVE-2005-0602

CVE-2005-0602 affects unzip 5.51 and earlier, where extracting setuid/setgid files may not warn the user, enabling local privilege escalation. Multiple connected docs corroborate: Ubuntu USN-159-1 describes unzip vulnerability and remediation guidance; Mandrake MDKSA-2005:197 notes the issue and ...

CVE-2005-0595

CVE-2005-0595 is a public buffer-overflow vulnerability in BadBlue 2.55/2.5 where ext.dll overflows via a long mfcisapicommand parameter, enabling remote code execution. Public disclosures include SPL/Metasploit-era exploits (BadBlue 2.5 EXT.dll Buffer Overflow) and OSVDB/BID/CVE references; CIRC...

CVE-2005-0601

CVE-2005-0601 affects Cisco’s Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, and 5.2. The issue arises when the setup dialog has not been run, leaving a default password that could allow remote attackers to gain access. The connected documents do not provide specific technical de...

CVE-2005-0630

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter...

SUSE-SA:2005:012: imap

The remote host is missing the patch for the advisory SUSE-SA:2005:012 imap. The University of Washington imap daemon can be used to access mails remotely using the IMAP protocol. This update fixes a logical error in the challenge response authentication mechanism CRAM-MD5 used by UW IMAP. Due to...

glFTPd Multiple Script ZIP File Handling Arbitrary File / Directory Access

The remote glFTPD server fails to properly sanitize user-supplied input to the 'sitenfo.sh', 'sitezpichk.sh', and 'siteziplist.sh'. An attacker could exploit this flaw to disclose arbitrary files by sending a spcially crafted request to the remote host. C Tenable Network Security, Inc...

RealNetworks RealPlayer SMIL Buffer Overflow

This module exploits a stack buffer overflow in RealNetworks RealPlayer 10 and 8. By creating a URL link to a malicious SMIL file, a remote attacker could overflow a buffer and execute arbitrary code. When using this module, be sure to set the URIPATH with an extension of '.smil'. This module has...

CVE-2005-0591

Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...

CVE-2005-0589

CVE-2005-0589 affects Firefox before 1.0.1. The Form Fill feature can allow remote attackers to steal potentially sensitive information by monitoring values generated by the autocomplete capability. This is described in the NVD entry and echoed by multiple advisories (e.g., RHSA-2005:176, GLSA-20...

CVE-2005-0624

reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords...

CVE-2005-0590

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real...

CVE-2005-0588

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...

CVE-2005-0586

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content...

CVE-2005-0208

The vulnerability CVE-2005-0208 affects the Gaim client HTML parser prior to version 1.1.4, where malformed HTML can trigger an invalid memory access and cause an application crash (DoS). This is the primary issue described (distinct from CVE-2005-0473). Remediation is upgrading Gaim to 1.1.4 or ...

CVE-2005-0586

CVE-2005-0586 affects Firefox < 1.0.1 and Mozilla

CVE-2005-0585

CVE-2005-0585 affects Firefox <1.0.1 and Mozilla

CVE-2005-0591

CVE-2005-0591 affects Firefox prior to 1.0.1, allowing remote spoofing of the security and download modal dialogs (Firespoofing). Red Hat advisory RHSA-2005:176 and CentOS notes indicate that Firefox was updated and recommend upgrading to Mozilla 1.7.7 to remediate the issue.

CVE-2005-0592

CVE-2005-0592 describes a heap-based buffer overflow in the UTF8ToNewUnicode function affecting Firefox before 1.0.1 and Mozilla before 1.7.6. The flaw can be triggered by invalid UTF-8 sequences that yield a zero length value, potentially allowing a remote attacker to crash the browser or execut...

CVE-2005-0593

CVE-2005-0593 affects Firefox before 1.0.1 and Mozilla before 1.7.6. It enables remote attackers to spoof the SSL “secure site” lock icon through scenarios where the lock display is misleading (unfinished load, non-HTTP SSL, or HTTP 204 responses). The issue is documented across multiple advisori...

CVE-2005-0624

reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords...