CVE-2005-3503

CVE-2005-3503 affects chfn in pwdutils

vBulletin Init.PHP unspecified vulnerability

The remote host is running vBulletin, a web based bulletin board system written in PHP. The remote version of this software is vulnerable to an unspecified issue. It is reported that versions 3.0.0 through to 3.0.4 are prone to a security flaw in 'includes/init.php'. Successful exploitation...

vBulletin < 3.0.5 'init.php' Unspecified Vulnerability

It is reported that versions 3.0.0 through to 3.0.4 of vBulletin are prone to a security flaw in SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CubeCart < 3.0.4 Multiple Script XSS

The remote version of CubeCart contains several cross-site scripting vulnerabilities due to its failure to properly sanitize user-supplied input of certain variables to the 'index.php' and 'cart.php' scripts. %NASLMINLEVEL 70300 Josh Zlatin-Amishav This script is released under the GNU GPLv2...

FreeBSD : horde -- Horde Page Title XSS Vulnerability (396ee517-a607-11d9-ac72-000bdb1444a4)

Secunia Advisory: SA14730 A vulnerability has been reported in Horde, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed when setting the parent frame's page title via JavaScript is not properly sanitised before being returned to the user. This can be...

spamassassin security update

CentOS Errata and Security Advisory CESA-2005:498 An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way t...

Moderate: Red Hat Security Advisory: spamassassin security update

An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from...

Fedora Core 3 : spamassassin-3.0.4-1.fc3 (2005-427)

Important update for a Denial of Service vulnerability, plus more bug fixes from upstream. More details available at: http://wiki.apache.org/spamassassin/NextRelease Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenabl...

CVE-2005-0961

Cross-site scripting XSS vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title...

CVE-2005-0961

Cross-site scripting XSS vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title...

CVE-2005-0961

Horde 3.0.4 is vulnerable to an XSS in the page title due to insufficient sanitization of the parent frame title, affecting versions before 3.0.4-RC2. The vulnerability allows remote attackers to inject arbitrary script/HTML. Remediation: upgrade to Horde 3.0.4-RC2 or later.

[SA14730] Horde Page Title Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Horde Page Title Cross-Site Scripting Vulnerability...

vbulletin-3.0.4-2.txt

fetcharray$forumusers == True , when you visit the forums, it must has at least one user show the forum. Fourth condition: magicquotesgpc must be OFF Vulnerable Systems: vBulletin version 3.0 up to and including version 3.0.4 Immune systems: vBulletin version 3.0.5 vBulletin version 3.0.6 / if...

[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 679-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

CVE-2004-0930

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

security flaw

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

PT-2004-1772 · Samba +1 · Samba +1

Name of the Vulnerable Software and Affected Versions: Samba versions 2.2.x through 2.2.9 Samba versions 3.0.0 through 3.0.4 Description: A buffer overflow issue exists when the mangling method = hash option is enabled in smb.conf. The impact and attack vectors of this issue are not specified. Th...

Samba 3.0.4 - SWAT Authorisation Buffer Overflow

Samba 3.0.4 - SWAT Authorisation Buffer Overflow !/usr/bin/perl Samba 3.0.4 and prior's SWAT Authorization Buffer Overflow Created by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort =...

security flaw

Unknown vulnerability in modpython 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service httpd crash via a certain query string...

CVE-2001-0571

The CVE-2001-0571 entry describes a directory traversal vulnerability in the web server component used by (1) Elron Internet Manager Message Inspector and (2) Anti-Virus prior to 3.0.4. The flaw allows remote attackers to read arbitrary files by supplying a ... sequence in the requested URL. Affe...