RHEL 4 : htdig (RHSA-2005:090)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:090 advisory. The ht://Dig system is a Web search and indexing system for a small domain or intranet. Michael Krax reported a cross-site scripting bug affecting...

RHEL 4 : vim (RHSA-2005:036)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:036 advisory. VIM Vi IMproved is an updated and improved version of the vi screen-based editor. Ciaran McCreesh discovered a modeline vulnerability in VIM...

Mac OS X Java JRE Plug-in Capability Arbitrary Package Access (Security Update 2005-002)

The remote host is missing Security Update 2005-002. This security update contains a security bugfix for Java 1.4.2. A vulnerability in the Java Plug-in may allow an untrusted applet to escalate privileges, through JavaScript calling into Java code, including reading and writing files with the...

RHEL 4 : squirrelmail (RHSA-2005:099)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:099 advisory. SquirrelMail is a standards-based webmail package written in PHP4. Jimmy Conner discovered a missing variable initialization in Squirrelmail...

RHEL 4 : enscript (RHSA-2005:040)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:040 advisory. GNU enscript converts ASCII files to PostScript. Enscript has the ability to interpret special escape sequences. A flaw was found in the...

Mambo Open Source Tar.php Remote File Inclusion

The version of Mambo Open Source on the remote host fails to properly sanitize input passed through the 'mosConfigabsolutepath' parameter of the 'Tar.php' script. Provided PHP's 'registerglobals' setting is enabled, a remote attacker may exploit this vulnerability to cause code to be executed in...

RHEL 4 : libtiff (RHSA-2005:035)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:035 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. infamous41md discovere...

RHEL 4 : python (RHSA-2005:108)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:108 advisory. Python is an interpreted, interactive, object-oriented programming language. An object traversal bug was found in the Python SimpleXMLRPCServer. This...

RHEL 4 : gpdf (RHSA-2005:057)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:057 advisory. GPdf is a viewer for Portable Document Format PDF files for GNOME. A buffer overflow flaw was found in the Gfx::doImage function of Xpdf whic...

CVE-2005-0503

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges...

CVE-2005-0490

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...

CVE-2005-0091

Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls...

CVE-2005-0090

CVE-2005-0090 relates to a missing access check regression in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch. The issue allows a local unprivileged user to cause a denial of service (crash) on hugemem configurations. The RHSA-2005:092 advisory documents the kernel security update that ...

CVE-2005-0498

The CVE-2005-0498 issue affects the Gigafast router (CompUSA router). A remote attacker can bypass the login by making a direct request to backup.cfg, which exposes the administrator password in plaintext. This results in partial confidentiality and partial integrity/availability impact per CVSS ...

CVE-2005-0204

Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction...

CVE-2005-0503

The CVE-2005-0503 issue affects uim (libuim) where environment variables are trusted when linked into setuid/setgid applications, enabling local privilege escalation. Public details from Gentoo GLSA 200502-31 and SUSE/Gentoo advisories specify that only immodule-enabled Qt builds are affected (Qt...

CVE-2005-0503

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges...

CVE-2005-0496

Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands...

CVE-2005-0467

CVE-2005-0467 affects PuTTY PSFTP/PSCP clients (up to and including 0.56; possibly earlier) via two heap-corruption vulnerabilities: improper handling in sftp_pkt_getstring and fxp_readdir_recv that can enable remote code execution when interacting with a malicious SFTP server. A patch/mitigation...

CVE-2005-0496

The CVE-2005-0496 entry applies to Arkeia Network Backup Client 5.x, where hard-coded credentials act as a back door. This allows remote attackers to access the file system and, per connected sources, potentially execute arbitrary commands. The Nessus/PT-2005-1551 item notes a default/account in ...