Fedora Core 3 : kdeedu-3.3.1-2.3 (2005-148)

Tue Feb 8 2005 Than Ngo 3.3.1-2.3 - More fixing of CVE-2005-0011 patch - Tue Feb 1 2005 Than Ngo 3.3.1-2.2 - Apply patch to fix buffer overflow in fliccd, CVE-2005-0011 146290 - replace kgeo 142367 Note that Tenable Network Security has extracted the preceding description block directly from the...

RHEL 3 : cups (RHSA-2005:132)

Updated cups packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS is a print spooler. During a source code audit, Chris Evans discovered a number of integer...

CVE-2005-0254

BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those...

CVE-2005-0253

Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. dot dot sequences in the databasename parameter...

CVE-2005-0254

BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those...

CVE-2005-0457

Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGETMPDIR portage temporary directory...

CVE-2005-0252

CVE-2005-0252 concerns BibORB, a web interface for BibTeX. A SQL injection vulnerability affects BibORB 1.3.2 and earlier, where the login procedure allows remote attackers to execute arbitrary SQL commands via the Username or Password fields. The impact is remote compromise of the application, w...

CVE-2005-0462

Cross-site scripting XSS vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter...

CVE-2005-0372

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. dot dot sequences in filenames returned from a LIST command...

CVE-2005-0254

BibORB 1.3.2 and earlier versions are affected by an arbitrary file upload vulnerability due to improper enforcement of restrictions on uploaded files. Specifically, the upload mask allows non-PDF/PS data to be uploaded and then displayed with PDF/PS icons, potentially tricking users into downloa...

CVE-2005-0462

Cross-site scripting XSS vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter...

CVE-2005-0461

Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments."...

CVE-2005-0458

CVE-2005-0458 describes a cross-site scripting (XSS) vulnerability in osCommerce 2.2-MS2, specifically in the contact_us.php script where the enquiry parameter can be abused to inject arbitrary script or HTML. The NVD entry confirms the vulnerability as an XSS flaw with the affected component bei...

CVE-2005-0459

CVE-2005-0459 affects phpMyAdmin 2.6.2-dev (and possibly earlier) and allows remote attackers to discover the full web-root path by requesting select_lang.lib.php, causing a PHP error message that reveals the path. The vulnerability is due to error output disclosing the filesystem path; no exploi...

CVE-2005-0463

The CVE-2005-0463 entry pertains to Ulog-php before v1.0 with probable SQL injection flaws due to input validation issues in (1) host.php, (2) port.php, and (3) index.php. Public data provide no confirmed impact or exploit details. CVSS suggests HIGH severity (7.5), but explicit exploitation stat...

CVE-2005-0251

BibORB is affected by a cross-site scripting (XSS) vulnerability in bibindex.php, affecting BibORB 1.3.2 and possibly earlier versions. The issue allows remote attackers to inject arbitrary HTML/script via the search parameter, enabling client-side execution when viewing data. Public reports (e.g...

CVE-2005-0456

Opera 7.54 and earlier is vulnerable to a data: URI handling issue where base64-encoded binary data is not validated, allowing a malicious site to obscure the URL in the download dialog and potentially lead to arbitrary code execution. Connected advisories (Gentoo GLSA 200502-17, OpenVAS entries)...

CVE-2005-0461

CVE-2005-0461 affects NewsBruiser 2.x prior to 2.6.1. The connected sources describe an unknown vulnerability that allows remote attackers to “take actions on comments.” The exact root cause is not specified in the provided documents, and there are no remediation details included here. Concrete e...

CVE-2005-0462

MercuryBoard is affected (versions 1.0.x and 1.1.x) by a cross-site scripting (XSS) vulnerability that allows remote injection of HTML/script via the f parameter. The OpenVAS entry also notes multiple vulnerabilities including XSS, SQL injection, and path disclosure in MercuryBoard. The CVE-2005-...

CVE-2005-0457

CVE-2005-0457 affects Opera on Gentoo Linux (versions 7.54 and earlier) due to an insecure plugin path that allows local privilege escalation by placing malicious libraries in the PORTAGE_TMPDIR. Connected sources (Gentoo GLSA 200502-17) reiterate this as a vulnerability in Opera’s handling of pl...