Mandrake Linux Security Advisory : sendmail (MDKSA-2006:156)

Moritz Jodeit discovered a vulnerability in sendmail when processing very long header lines that could be exploited to cause a Denial of Service by crashing sendmail. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : libtunepimp (MDKSA-2006:126)

Kevin Kofler discovered multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp 0.4.2 that allow remote user-complicit attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2006:164-1)

Local exploitation of an integer overflow vulnerability in the 'CIDAFM' function in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server, typically root CVE-2006-3739. Local exploitation of an integer overflow vulnerability in the...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2006:155)

Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images. CVE-2006-3743 Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun bitmap images that...

CVE-2006-6600

Cross-site scripting XSS vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609...

CVE-2006-6604

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the alias parameter, a different vector than CVE-2006-6328...

CVE-2006-6600

Cross-site scripting XSS vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609...

CVE-2006-6598

Directory traversal vulnerability in viewnfo.php in 1 TorrentFlux before 2.2 and 2 torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the path parameter, a different vector than CVE-2006-6328...

CVE-2006-6604

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the alias parameter, a different vector than CVE-2006-6328...

CVE-2006-6599

The CVE-2006-6599 issue affects TorrentFlux 2.2, where maketorrent.php may allow remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter. This is a command-injection vulnerability through a user-controlled parameter, leading to p...

CVE-2006-6599

maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters ";" semicolon in the announce parameter...

CVE-2006-6600

CVE-2006-6600 describes a Cross-site Scripting (XSS) vulnerability in TorrentFlux 2.2, specifically in dir.php, where remote attackers can inject arbitrary web script or HTML through double URL-encoded strings in the dir parameter. This is linked to CVE-2006-5609. The provided sources confirm the...

CVE-2006-6604

CVE-2006-6604 concerns a directory traversal vulnerability in TorrentFlux 2.2. The affected component is the downloaddetails.php script, where the alias parameter can be manipulated with “..” sequences to read arbitrary files. The issue is exploitable by remote authenticated users, enabling file ...

CVE-2006-6600

Cross-site scripting XSS vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609...

CVE-2006-6604

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the alias parameter, a different vector than CVE-2006-6328...

CVE-2006-6596

HyperAccess 8.4 is affected: a user‑assisted remote vulnerability where a session (HAW) file can be automatically opened by Internet Explorer, allowing arbitrary vbscript and commands execution. The CVSS indicates NETWORK attack vector, medium complexity, no authentication, with partial impacts t...

CVE-2006-6601

The CVE-2006-6601 entry concerns Windows Media Player 10.0.0.4036 on Windows XP SP2. Affected component: MIDI (.MID) file handling. Root cause: a malformed header chunk (no track chunks) in a MIDI file, with potential issues in the number of tracks or time division fields set to 0, enabling a use...

CVE-2006-6602

CVE-2006-6602 affects explorer.exe in Microsoft Windows XP SP2 (Windows Explorer 6.00.2900.2180). A user-assisted remote attacker can cause a denial of service by presenting a crafted WMV file. Affected component: Windows Explorer. The connected documents provide the vulnerability description and...

CVE-2006-6598

CVE-2006-6598 affects TorrentFlux before 2.2 and torrentflux-b4rt before 2.1-b4rt-972. A directory traversal flaw in viewnfo.php allows remote authenticated users to read arbitrary files via .. sequences in the path parameter. Impact: partial confidentiality. The provided documents do not specify...

CVE-2006-6597

CVE-2006-6597 affects HyperAccess 8.4. An argument-injection vulnerability lets user-assisted remote attackers run arbitrary vbscript and commands via the /r option in a telnet:// URI configured to use hawin32.exe. The NVD entry assigns a CVSSv2 base score of 6.8 (Network, Medium complexity, no a...